Infrastructure Tags

Tags are defined by the company to identify assets that belong to them. About tags:

• Tags can be assigned to assets attributed to your My Company or to subsidiaries with a My Subsidiary subscription.
• Tags can be inherited by a child asset from its parent asset.
• Tags are informational and do not result in changes to infrastructure attribution.
• Applicable to IP/CIDR and domain assets; Not applicable to mobile assets.

Use tags to:

• Add context to findings as they arise.
• Categorize your SPM subsidiaries by headquarters, location, department, or business unit for your internal teams and reduce response times.
• Let others know which of your corporate networks are for testing or guests.
• Communicate which issues your company is actively working on.

• Signify ownership.

  Example: Create a private tag identifying the owner (user or team) of the infrastructure.

• Once parts of your infrastructure have been tagged, the following pages can be filtered by these tags:
  • Attribution – Filter assets by tags to get a clear overview of which tags belong to a subnet.
  • Findings Table – Search for findings that have and are related to only that tag.
• Define custom infrastructure.

See the Bitsight API.

Sections

• Inheritance
• Visibility
• Access Control

Tag Inheritance

Tags are inherited from its parent asset. If a parent asset is tagged with a specific attribute, the child assets inherit the same tag. Tags on the child asset are not inherited by the parent.

• A tag on a CIDR block is automatically applied to all IPs on that block.

• A tag on a domain applies to its subdomains.

  Example: The saperix.com domain has a tag. The sub.saperix.com subdomain inherits the same tag.

Tag Inheritance can be enabled or disabled in the Account Preferences tab of the Account page.

Tag Visibility

Tags may either be visible to all Bitsight users (public) or to only users within your My Company (private). Manage tags from the Infrastructure page.

• Public tags are visible to anyone with that company in their portfolio.
• Private tags are labeled with a Private icon.

The following default tags cannot be deleted or renamed, but may be set to “Private” or “Public”:

• Corporate Network
• Corporate Wi-Fi
• Guest Wi-Fi

Manage tags access control

Admins can restrict tag management to Admins and Group Admins at the account level. When enabled, non-admins have read-only access to tags across attribution, assets, and findings.

Who can change this
Only Admins and Group Admins. The setting lives in Account Preferences.

Default state
Off. The checkbox is unchecked by default.

How to turn it on

1. Go to Account Preferences.
2. Check Allow only Admins and Group Admins to manage tags.
3. Select Update.

Effect on non-admins
• Cannot create tags
• Cannot edit tag metadata
• Cannot delete tags
• Cannot assign or remove tags from assets