- Home
- Questions
What people ask on the first call.
Grouped roughly in the order they come up. If yours is not here, ask it in a working session or use the search on this site, which will try to answer it directly.
What it is
Is this hardware or software?
Software. It runs on hardware you already own. There is no appliance to buy and nothing is installed on the equipment we identify.
What does it need from us?
A read-only account on the switches already carrying your traffic, and network reach to them. That is the whole ask.
Do we need to be an AV company to use it?
No. Rooms are where the problem is loudest, which is why RoomIQ exists, but the method reads any managed switch port. Plenty of estates start with a building rather than a room.
What it will not do
Can it change anything on our network?
No. Every build ships with a test that fails if any write path exists in the product. It is not a setting that can be switched on.
Do you use a SPAN port, mirror or tap?
No, in any product. Packet contents are never examined. We read the counters and tables a switch already keeps.
Does it block or quarantine devices?
No. It identifies and it evidences. Enforcement is deliberately somebody else’s tool, because a product that can block is a product that can take your network down.
Will it install an agent?
No. Nothing is installed on the device being identified, and the device is never contacted directly.
How sure it is
What happens when it cannot identify something?
It says so. The device stays on the report with its port and its hardware address, the confidence drops, and the report names what would settle it. One demo pass declined to name 14 devices out of 43 and listed all fourteen anyway.
Why does a score have a ceiling?
Because a number built on thin evidence should not be able to look like a number built on good evidence. CrossCheck caps at 60 when the firmware version came from memory. CrossRoom caps at 74 when part of the call went unmeasured.
Do you ever guess?
No. Where two sources disagree you get both, cited. Where the evidence runs out you get a stated gap. A guess dressed as an answer is the thing these products exist to replace.
Buying it
Do we have to buy all eight?
No. Each is a whole product on its own, and it works the same whether or not you ever add a second.
Where do most people start?
A discovery pass with CrossScan. Every other question needs a real list of what is connected before it can be answered, and hardly anyone has one.
What does a working session actually involve?
Thirty minutes. You bring one room, one closet or one folder. We point the relevant product at it and you leave with the answer, including if the answer is that it found nothing interesting.
Security and compliance
What standards do you align to?
SOC 2 Type II aligned and NDAA 889 aligned. Aligned, not certified: we do not hold a SOC 2 Type II report and we are not FedRAMP authorized. Anyone telling you otherwise is wrong.
Is the site accessible?
We target WCAG 2.2 Level AA and publish what our own automated check finds, including where it fails. The statement is here.
Where does our data go?
It stays in your deployment. The products run on your hardware and read your network. The privacy page covers what this website itself collects, which is separate and much smaller.
Still not answered?
Search this site and it will try the question directly, or bring it to a session and get it answered by somebody who can be wrong out loud.