Skip to main content

Overview

Asset Decommissioning helps you maintain an accurate and clean inventory by retiring assets that are no longer active or relevant.
AIM supports both automatic and manual decommissioning — ensuring minimal false positives and maintaining traceability for every change.

Decommissioning Workflow


Automatic Decommissioning (Adapter-Driven)

Staged Decommissioned Assets

Adapters continuously monitor external platforms like Cloudflare, AWS, or GitHub to detect when assets disappear or become inactive.
When such assets are found missing, AIM automatically moves them to a Staged state rather than directly decommissioning them.
This two-step model reduces false positives and ensures human review before removal.

Workflow

  1. Adapter Detection — System identifies that an asset (e.g., DNS record, IP, or repo) no longer exists in the source.
  2. Move to Staged Mode — Asset is marked as Staged for Decommission for review.
  3. Manual Review & Approval — A user can later confirm decommissioning from the Staged section.
⚙️ Example: If your DNS adapter previously detected api.example.com in Cloudflare, but the record was later removed, it will move to Staged Decommission automatically.

Manual Decommissioning

Manual Decommission Action

Manual decommissioning allows users to retire an asset directly from the Assets view.
This is typically done when teams know a resource is intentionally removed, outdated, or migrated.

Steps

Open the Asset Record

Navigate to the asset you want to retire from the Assets section.

Click Decommission Asset

The button appears on the asset’s detail card.

Provide a Reason

Enter a justification for why the asset is being decommissioned (e.g., “This domain is no longer needed and has been taken down.”)

Confirm the Action

Once confirmed, the asset will be marked as Decommissioned and moved to the dedicated listing.

Decommission Confirmation Modal


Viewing Decommissioned Assets

The Decommissioned section provides a summary of all retired assets, along with reasons, responsible users, and source adapters.

Decommissioned Asset Summary

Columns Explained

ColumnDescription
Asset ValueName or identifier of the retired asset
ReasonExplanation recorded at decommission time
Decommissioned ByThe user who confirmed the action
SourceAdapter or discovery source of the asset
ActionOption to Reactivate the asset if needed

Reactivation Of Decommissioned Assets

Reactivation Option

Navigate to Decommissioned Assets

Go to the Decommissioned section from the left sidebar under Assets → Decommissioned.

Locate the Asset

Find the asset you want to restore in the list. You can use filters like Adapter, Risk, or Source for quick lookup.

Click Reactivate Asset

Click the Reactivate Asset button on the right side of the asset row.

Asset Reactivated

The asset will move back to the Active inventory and resume normal monitoring through adapters.

Reactivation Option


Best Practices

  • Always review Staged assets before confirming decommissioning.
  • Record clear reasons for every manual decommission to maintain audit trails.
  • Periodically check if any decommissioned assets have resurfaced via integrations.
  • Use adapter-driven automation to avoid stale inventory while reducing manual oversight.

Explore Live Demo

Explore AIM Live — No Signup Needed

Instantly explore how Snapsec AIM discovers, enriches, and tracks every asset in real time — all without creating an account.