CybrIQ

Know what’s connected.

from rooms to buildings to the network

Read-only software that finds and identifies every device on your network.

A drawing running left to right: a conference room with a display, camera and touch panel; a multi-story office building; and a rack of network switches and servers. Curved connection lines link all three, marked by circles for rooms, buildings and the network.

Most people start with a discovery pass: it takes an afternoon, and it is what makes the other seven useful.

DETECT·CORRECT·PROTECT

What CybrIQ isIn one sentence

Somebody has to know what is plugged into your network and whether it can be trusted. We make eight tools for that job. All eight only look.

AV Technology Best of Show 2026 award, presented at InfoComm
Best of Show 2026 AV Technology, at InfoComm.
What it isBefore you pick anything
What it isSoftware

Runs on hardware you already own. There is no box to buy, and nothing gets installed on the equipment we identify.

What it touchesThe switches you already run

We sign in to the switches already carrying your traffic, using an account that can look but cannot change anything.

What it never doesChange anything, or copy your traffic

It never changes a setting on anything. It never copies the traffic on your network, and it never sits in the middle of it.

Where it stopsIt says when it cannot tell

One demo pass declined to name 13 devices out of 43. It listed all thirteen anyway, with the port each one sits on.

Which one is yoursTwo ways in

Which of these sounds familiar?

Most people arrive with one of these already burning. Find yours and read only that.

  1. The audit found a camera in the boardroom. We never bought it.RoomIQ
  2. The phones died Monday morning and everyone swears nothing changed.CrossConnect
  3. The utility bill lands and nobody can say which nights ran it up.CrossVenue
  4. We took over this campus a year ago and we are still finding devices.CrossScan
  5. An executive said the call was unusable. Every device was green.CrossRoom
  6. Something appeared on the network last night and nobody can say what it is.SpacesIQ
  7. Every job starts by working out which of our documents is lying.CrossTrust
  8. There is a firmware upgrade Saturday and the last one took the boardroom down.CrossCheck
Book a 30-minute working session None of these is me
If none of those was youThen start here

Point it at one switch. See what is plugged in.

Every question above needs the same thing first: a real list of what is connected. Hardly anyone has one.

Start with a discovery pass Read the questions first

Buy one and stop there if you like. Every one of the eight stands on its own, and it works the same with or without the other seven.

Three columns from a switch's port list. The device column names a reception kiosk PC, an access point with four devices behind it, a desk phone, a camera, a presentation gateway and a control panel. The room column gives Reception, Office 210, the Training Room and the Boardroom. The confidence column runs from unknown at 10 percent to confirmed at 100 percent. 1
  • 1It found four more behind this one
One switch, and what is on it. The gear, the room it sits in, and how certain the match is. Nothing here was typed in by hand. One switch
demo system
Why you do not already knowFour tools, four blind spots

You already own four things that were supposed to tell you.

Each one does its own job well. None was built to tell you what is plugged into every port, and what falls between the four is exactly what the auditor finds.

Network access control

Sees

Anything that signs on to the corporate network the proper way.

Misses

The switch a contractor put in the AV closet, and the four things hanging off it.

Endpoint protection

Sees

Anything that can run its software: laptops, servers, phones.

Misses

Most of the room. A camera, a badge reader and a signage player all refuse it.

The asset register

Sees

Whatever purchasing wrote down on the day it was bought.

Misses

On one campus it accounted for roughly two thirds of what was live on the ports.

Your own drawings

Sees

Whatever was true on the afternoon somebody drew it.

Misses

Every change since. Each job now starts by working out which document is lying.

CybrIQ RoomIQ summary showing 22 rooms: 13 ready, seven at risk or drifted, and two offline. A room search field and clear room-status indicators appear below the summary.
The meeting rooms that need attention are visible at a glance. RoomIQ sorts every room into ready, at risk, drifted or offline, so you know which one to check next. RoomIQ
room summary
Where CybrIQ fits against the tools you already own
How it worksThree steps

The switch already knows. We ask it.

Your building already keeps this information. We read it without changing anything and turn it into something you can act on this week, whether that is a room that drifted, a switch nobody recorded or a device the register never had.

Nothing gets installed on your equipment, by any of the eight. One security review covers all of them.

01It reads

Your switches already know what is on every port. It asks the switch, and never touches the device itself.

02It compares

That reading goes against a library of known equipment, and against your own records. When the two disagree, you get both.

03You see how sure it is

Every line says where it came from, and a poor match drags the score down until somebody fixes it.

How we tell what a device really is
What arrives, and whenThree moments

What to fix, what broke it, and what the auditor gets.

Every morning What to fix first

Everything it found overnight, worst at the top, in sentences you can act on.

A ranked findings queue. Counters read 7 critical, 335 high, 946 medium, 243 low and 1531 to act on. The highest priority finding reads: single-path AV stream, Studio B floor audio, with the plain explanation that there is no secondary path so a single switch or uplink failure drops the stream. 1 2
  • 1How many, by how bad
  • 2What to do about it
The top item, in plain English. One audio stream has no backup path, so a single failure kills it. Every row tells you what it is based on. Findings queue
demo system
The morning it breaks The change that did it

It worked Monday and broke by lunch, and everybody you ask says they changed nothing.

A verdict banner reading: found the change that broke it, healthy at 11 August 06:31, first broken by a coordinated change across 3 devices at 08:31. Below it a timeline runs green up to a point marked healthy and red after a point marked broken. 1 2
  • 1The change it found
  • 2Worked, then broken
The breaking change touched 3 devices. This is the first of them, before and after.
COR-BB-AES67-01 · HEALTHY · 30 Aug 15:32
version 15.2hostname cor-bb-aes67-01!10 lines unchangedip route 10.11.20.0 255.255.255.0 172.21.0.2end

Removed: the route to the audio network.

COR-BB-AES67-01 · BROKEN · 30 Aug 17:32
version 15.2hostname cor-bb-aes67-01!10 lines unchangedrouter bgp 65111  neighbor 172.21.0.2 route-map REJECT-AES67 in!route-map REJECT-AES67 deny 10  match ip address prefix-list AES67-PREFIX!ip prefix-list AES67-PREFIX permit 10.11.20.0/24end

Added: a rule telling the router to refuse that route.

What worked, and what broke it. Green is the last minute it worked. Red is the first minute it did not. On the left, the line that was deleted. On the right, what replaced it. Network black box
demo system
See the network black box in CrossConnect
The week the auditor comes The pack, already written

Dated, one line per device, so you can hand it over without assembling anything.

A sample evidence pack: a dated per-device inventory record showing what was on each port, how it was identified, and the audit controls each device satisfies.
Nobody assembles this. It is the same record the screens are built from, dated and exported. Evidence pack
What changedOne hospital campus

One hospital campus stopped walking closets before audits.

Before every audit, somebody senior spent six weeks walking closets and rebuilding the device list by hand. We swept the campus on a Wednesday, and by Friday they had a real list. They never ran the six weeks again.

6 weeks to 4 days

Audit preparation, before and after.

47

Devices with no record anywhere. Found, named and dated by Friday.

11

Switches nobody had recorded, put in by contractors over the years.

3

Devices run by outside vendors that the IT team could not see.

One Fortune 500 hospital campus, Wednesday to Friday. Anonymized at the customer’s request. Read the engagement

The jobs it gets hired forWhere this shows up on a budget
Four questions from first callsShort answers

No software on your gear. Nothing written. A list by Friday.

Does this put software on my devices?

No. We read your switches. Nothing is installed on the devices we identify, and we never copy your traffic. The one optional exception is a small USB agent for workstations, part of RoomIQ and SpacesIQ, for spotting USB attack hardware.

Can it break something?

Nothing we ship can write to a device, in any product, under any setting.

What happens when it is not sure?

It says so, and the score drops. The device stays on the list with the port it sits on, so somebody can go and look.

How long until there is a real inventory?

Agree on Monday what to look at. You have a real list by Friday.

Every question we get, answered
Where it stopsFour of the ceilings

We publish what we could not identify.

An auditor cannot use a score that never admits doubt, so every gap gets a name, lowers the number and arrives with the one thing that would close it.

Unknown

What a device is called when its signature is too thin to name. It stays on the map with its port, so somebody can go and look.

CrossScan
60

The highest score it gives a verdict built on a remembered firmware version. Passing takes 75, so read the real version first.

CrossCheck
74

Its ceiling when any part of the call went unmeasured, so a half-seen room can never pass as fine.

CrossRoom
no answer

Two documents disagree and neither outweighs the other. It says so, and names the check that would settle it.

CrossTrust
Why this existsThe people behind it

We did the clipboard walk ourselves.

Before every audit, somebody spent six weeks in closets writing down by hand what the switches already knew. For years that somebody was us. Nobody else was going to build the tool that ended it, so we did.

Where this came from, and who is doing it
Shai Moshe, founder and chief executive of CybrIQ
Shai Moshe, founder. He ran a 365-site video network at AGT and put sixteen News Corp companies on one platform for Fox. None of them could say what was connected. Full background Founder & CEO
MethodDevice DNA™, patent pending
RecognitionAV Technology Best of Show 2026, InfoComm
PartnerUtelligent Alliance technology partner, Utelogy
Find usInfoComm 2026, Las Vegas, booth C5052
NextTwo ways from here

Try it on something of yours, or keep reading.

Bring one room, one closet, or one folder

Thirty minutes, with the right product pointed at it.

Book a 30-minute working session
Or decide without talking to anyone

The method, a sample evidence pack and the compatibility list, all on one page.

Evaluate it yourself