Asset Classification - Snapsec Suite

Asset classification ensures that security teams focus remediation efforts where business impact is highest.

Dynamic Classification Rules

Snapsec allows you to define YAML-based classifiers that evaluate asset metadata and apply classification tiers automatically:

classifier:
  name: "PCI-DSS Production Scope"
  target_tier: "Tier 1 (Mission Critical)"
  rules:
    any:
      - hostname: "*payment*"
      - hostname: "*checkout*"
      - tag: "pci == 'true'"
      - subnet: "10.200.0.0/16"

Criticality Tiers

Tier 1 (Critical): Production environments processing payment data (PCI), health records (HIPAA), or sensitive PII.
Tier 2 (High): Core customer-facing APIs and internal corporate authentication infrastructure.
Tier 3 (Medium): Staging, QA, and integration testing environments.
Tier 4 (Low): Ephemeral dev sandboxes and local testing nodes.