What counts as an asset
A counted asset is something that runs or stores data. The same rule applies to every cloud and to on-prem inventory. It decides your licensed node count, the usage shown on the billing page, AWS Marketplace metering, the node-limit check and every asset total on the Dashboard and Assets page.
Everything else is still discovered, shown, scanned and rule-checked — it just isn't counted. The Dashboard "Total Assets" tile and the Assets page show it as +N not counted (records, settings, network); hover for the list of groups.
Not counted
| Group | Examples | Why |
|---|---|---|
| DNS records | Route 53 / Azure DNS / Cloud DNS / on-prem / Cloudflare records | a row inside a zone (the zone itself counts) |
| Routes | route tables, route entries, device routing tables | routing configuration |
| Security-service settings | AWS Config recorder, GuardDuty detector, Inspector coverage, Security Hub hub | an on/off setting, not a workload |
| Network plumbing | subnets, VPCs / VNets / GCP networks, security groups / NSGs, NACLs, firewall rules, internet gateways, elastic IPs, DB subnet groups, VLANs | address space and traffic filters |
| Account-wide settings and policies | IAM password policy, IAM account summary, IAM managed policies, Conditional Access, Teams settings, GCP IAM bindings | configuration documents |
| Containers | AWS accounts and organizations, Azure subscriptions and resource groups, GCP projects and folders, Microsoft 365 tenants | they group resources and hold no data of their own |
| SQL Server records | mssql.instance, mssql.database | only the server (VM / RDS / Azure SQL) counts |
Still counted
Compute (VMs, instances, containers, functions, clusters), storage (buckets, volumes, file systems), databases, load balancers, NAT / VPN / transit gateways, peering, Direct Connect / ExpressRoute and cloud firewalls (they run traffic), DNS zones, IAM roles / users / groups, KMS keys, secrets, certificates, log groups, SNS / SQS, WAF, CloudFormation stacks, Microsoft 365 users, mailboxes, sites and service principals.
Microsoft's own built-in Microsoft 365 apps (service principals owned by a Microsoft tenant) don't count; the apps your organisation registered or consented to do.
In the API
GET /dashboard and GET /graph/summary return asset counts in node_count / total / by_type, plus
uncounted: { total, by_type } for everything shown but not counted. Node lists return total (every row),
asset_total (rows that count) and uncounted_total.