What Is Lansweeper? Features, Use Cases and Alternatives

Evaluating Lansweeper starts with one question teams often ask too late: what does it actually scan, and what do you still have to build on top of that data? However, IT teams that add Lansweeper expecting a full operational picture often end up bridging the gap themselves. Yet raw asset data is not CMDB context, service dependencies, or change risk analysis, and day-to-day IT operations depend on all three. According to Flexera’s 2025 State of ITAM Report, only 43% of IT teams report complete visibility across their asset estate, and that figure has declined year over year. In short, this guide covers what Lansweeper is, how its discovery engine works, its primary use cases, and where it typically runs out of road.

What is Lansweeper?

Lansweeper is a network discovery and IT asset inventory platform that scans physical, virtual, cloud, and operational technology environments to build a centralized database of every connected device. It captures hardware specifications, installed software, OS versions, user assignments, and vulnerability exposure data. The platform then makes that inventory searchable, reportable, and exportable to ITSM and security tools.

Platform evolution and market positioning

Originally founded in Belgium in 2004 as an on-premises scanning tool for Windows networks, Lansweeper has since moved to a cloud-native architecture. Today, it positions itself under the “Cyber Asset Intelligence” category, expanding beyond classic IT inventory into security-adjacent use cases: CAASM, OT and IoT device visibility, and AI usage tracking across endpoints.

As a result, Lansweeper reports being trusted by more than 30,000 IT environments worldwide. On Gartner Peer Insights, it holds a 4.0 out of 5.0 rating in the CAASM market (as of Q4 2025). Reviewers consistently note the depth of its agentless inventory across enterprise environments.

On the commercial side, Lansweeper uses SaaS-based pricing scaled by asset count, with tiered plans for environments of different sizes and a free trial option for evaluation.

How Lansweeper network discovery works

Diagram showing Lansweeper’s four scanning methods: active scanning (agentless, credential-based), LsAgent (endpoint agent), traffic sensor (passive), and cloud API connectors.

Specifically, Lansweeper’s discovery engine supports four scanning approaches, each suited to different parts of a hybrid environment. For a deeper breakdown of the trade-offs, see agent-based vs. agentless discovery and active vs. passive IT asset discovery.

Active scanning (agentless): First, credential-based scans using WMI, SSH, and SNMP protocols run against defined IP ranges. This approach works well for managed, network-accessible on-premises and data center assets.

LsAgent (agent-based): Second, a lightweight endpoint agent for Windows, macOS, and Linux captures inventory for remote devices. Once deployed, LsAgent runs on a configurable schedule (once per day by default) and covers roaming and off-network endpoints that credential-based scanning cannot reach.

Traffic sensor (passive): Third, the traffic sensor monitors network traffic to detect every device communicating on the network. This includes unmanaged assets, shadow IT, and rogue endpoints that active scanning misses because they fall outside defined IP ranges.

Cloud API connectors: Finally, cloud API connectors pull asset data from AWS, Azure, and Google Cloud using native APIs. No sensor deployment is required inside cloud environments.

Beyond discovery, Lansweeper builds a detailed record for each device: hardware specs, installed software, OS version, patch status, user assignments, and vulnerability exposure data sourced from the NIST National Vulnerability Database (NVD). Additionally, Lansweeper’s reporting engine supports built-in report templates and custom queries via LQL (Lansweeper Query Language) and SQL. A basic Lansweeper helpdesk module is included in select license tiers, covering asset-linked ticket creation and request tracking.

How does Lansweeper reporting work?

Specifically, Lansweeper’s reporting engine includes built-in templates for common inventory scenarios, covering hardware inventory, software counts, and end-of-life assets. It also supports custom queries via LQL and SQL. However, custom Lansweeper reports require technical knowledge to build. Out-of-the-box templates cover most standard use cases without query writing.

Additionally, recent platform additions include OT and IoT device classification, AI usage tracking across endpoints, and IP range coverage scoring to show where network visibility is complete and where gaps remain.

What Lansweeper is used for

In practice, four use cases drive most Lansweeper deployments.

IT inventory and hardware lifecycle tracking

Building and maintaining a current record of all hardware is the most common starting point for Lansweeper deployments. Teams use it to track end-of-life dates, warranty status, and asset locations. As a result, they can plan refresh cycles, track decommissions, and support capacity planning without manual spreadsheet maintenance.

Software license compliance

Software license compliance is one of Lansweeper’s strongest native use cases. Specifically, it compares installed software across the estate against purchased counts, giving license managers a defensible baseline before a vendor audit lands. However, teams with serious software license management requirements (contracts, depreciation schedules, and financial data) typically reach for dedicated ITAM tooling to fill the gaps Lansweeper leaves in that area.

Security and CAASM

Security is a growing use case for Lansweeper. Specifically, teams use it to identify unmanaged devices before they become threat vectors, flag software with known CVEs from NVD lookups, and track AI tool proliferation across endpoints. This is an increasingly common requirement as unsanctioned AI services grow inside enterprise environments. As a result, teams that need deeper cybersecurity asset management capabilities often evaluate dedicated solutions alongside Lansweeper.

ITSM and CMDB population

Finally, many teams use Lansweeper to push discovered asset data into ITSM platforms as a foundation for incident and change workflows. However, Lansweeper is not a CMDB. It feeds asset data into platforms that are. For smaller organizations, the Lansweeper helpdesk module provides basic ticketing in the same tool. Enterprise IT teams, however, typically continue using their primary ITSM for service management and treat Lansweeper purely as an inventory and data source layer.

Lansweeper integrations

Lansweeper’s integration ecosystem spans ITSM, endpoint management, cloud, and security platforms. On the ITSM side, a Service Graph Connector for ServiceNow (available through the ServiceNow Store) pushes Lansweeper-discovered assets into ServiceNow’s CMDB as configuration items. Similarly, a Jira Service Management integration connects assets to issues and projects for teams in the Atlassian ecosystem.

Integration flow diagram showing data moving from Lansweeper discovery to ServiceNow CMDB, Jira, and security platforms.

Additionally, Lansweeper accepts inbound data from Microsoft SCCM and Intune, which fills coverage gaps for assets managed through those platforms. Cloud connectors handle AWS, Azure, and GCP without sensor deployment.

Bidirectional sync limitations

However, one practical constraint is worth flagging: Lansweeper’s ITSM integrations are largely one-directional. Specifically, discovered asset data flows from Lansweeper outward into connected platforms. Updates made to CI records inside a connected ITSM (ownership changes, relationship data, lifecycle events) do not automatically reflect back into Lansweeper. As a result, teams managing CI relationships or change history inside their ITSM need to maintain those records separately from Lansweeper’s asset database.

Where Lansweeper falls short

In practice, asset discovery gives you a list. However, what teams need to act confidently during incidents, change windows, and audits is a map of how those assets relate to each other and to the services that depend on them. That is where Lansweeper’s architecture shows its limits.

Specifically, several limitations come up consistently among teams running Lansweeper in production.

No service dependency mapping

Lansweeper shows which assets exist and their attributes. However, it does not show which services depend on which infrastructure components, or which CIs would break if a shared database server, a network device, or a cloud instance went offline. For change managers and incident responders, the absence of that dependency context is a real operational gap.

Discovery data reflects the last scan cycle, not the current state

As a result, that visibility gap gets wider as time passes between scans. LsAgent scans once per day by default, so Lansweeper’s asset data reflects the last completed scan cycle. In environments where assets spin up, are reconfigured, or go offline frequently, the inventory picture can lag behind reality.

Limited CI relationship modeling

Lansweeper stores asset attributes but does not model CI relationships the way a purpose-built CMDB does. Specifically, there is no CI lifecycle management, no change history at the CI level, and no CMDB health scoring. For teams building toward sound CMDB best practices, Lansweeper’s data quality tools stop well short of what a dedicated CMDB provides. Teams planning a successful CMDB implementation typically need a platform that goes beyond asset inventory.

Shallow ITAM beyond license counting

Lansweeper covers software license counts and hardware inventory well. However, it does not track contracts, warranties, asset depreciation, or financial data. Teams with serious IT asset management requirements typically need dedicated ITAM tooling beyond what Lansweeper includes. Therefore, understanding CMDB and ITAM at scale can help teams determine where Lansweeper fits and where it falls short.

Reporting demands SQL or LQL knowledge

The LQL and SQL-based reporting engine is flexible. However, it is not accessible without technical knowledge. Built-in reports cover common scenarios, but anything custom requires hands-on query writing that non-technical stakeholders cannot self-serve.

Lansweeper alternatives worth evaluating

Specifically, the table below compares Lansweeper and Virima across the capabilities teams most commonly evaluate when deciding whether an inventory tool is enough or whether a full CMDB layer is needed.

See the full Virima vs. Lansweeper comparison.

Virima

Virima combines IT discovery with a discovery-populated CMDB, ViVID™ service maps for application-to-infrastructure dependency context, full ITAM lifecycle tracking, and bidirectional sync with ServiceNow, Jira Service Management, Ivanti, Halo, Xurrent, Hornbill. Where Lansweeper delivers an asset inventory, Virima delivers discovery-sourced ground truth: the relational, context-rich operational data that ITSM workflows, change management, and AI-ready IT environments depend on.

Virima also integrates with ServiceNow in a complementary way. Rather than replacing ServiceNow’s own discovery, Virima enriches the ServiceNow CMDB with discovery-sourced data, reducing duplicates and noise while adding the dependency context ServiceNow’s native tooling does not surface.

Device42

Device42 covers discovery and CMDB for data center and hybrid environments. Specifically, it has strong DCIM capabilities for teams managing physical infrastructure at scale. However, it is most relevant to organizations with significant on-premises data center footprints.

ServiceNow Discovery

ServiceNow Discovery suits organizations already running ServiceNow across their ITSM operations. However, it comes with significantly higher licensing cost and implementation complexity. As a result, it is most cost-effective for teams already invested in the ServiceNow platform.

Why teams typically outgrow Lansweeper

If your team is moving toward more AI-driven IT operations or needs accurate operational data for autonomous change workflows, discovery-only tooling becomes a limiting factor. Teams evaluating their options for AI in IT service management should factor in whether their data layer can support safe, governed automation.

In practice, teams that start with Lansweeper typically do not outgrow it because the discovery is poor. The discovery is genuinely strong. Instead, they outgrow it because their operations demand more than a list. For instance, service management, change risk analysis, audit readiness, and AI-enabled workflows all require accurate CI relationships and service context that sit above the asset layer. Virima provides that layer, built from discovery data, without replacing the ITSM tools you already run.

Discover What Comes After the Asset List

Frequently Asked Questions

What’s the difference between an IT asset inventory tool and a CMDB?

An IT asset inventory tool records what devices exist and their attributes, including hardware specs, installed software, OS versions, and user assignments. In contrast, a CMDB models configuration items and the relationships between them, including service dependencies, CI ownership, and change history. Lansweeper is primarily an inventory tool. Therefore, a purpose-built CMDB adds the relational layer needed for accurate change impact analysis and incident triage.

Can Lansweeper replace a CMDB?

Lansweeper scans and inventories assets well. However, it does not model CI relationships, track service dependencies, or provide the relational data that CMDB platforms are built around. As a result, teams using Lansweeper for ITSM workflows typically push its data into a separate CMDB platform to get the full operational picture for change management and incident response.

How does Lansweeper network discovery work?

Lansweeper uses four discovery methods to cover different parts of a hybrid environment. First, active scanning handles credential-based, agentless coverage via WMI, SSH, and SNMP for managed on-premises and data center assets. Second, LsAgent is a lightweight endpoint agent for Windows, macOS, and Linux that runs once daily by default and covers remote and off-network devices. Third, the traffic sensor is a passive network listener that detects unmanaged and rogue assets without active scanning. Finally, cloud API connectors pull asset data from AWS, Azure, and Google Cloud without sensor deployment inside cloud environments.

Does Virima replace Lansweeper?

Virima and Lansweeper serve overlapping but distinct purposes. Specifically, Virima’s discovery covers agentless, agent-based, and cloud API scanning, then adds a purpose-built CMDB, ViVID™ service maps for application-to-infrastructure dependency context, and bidirectional ITSM sync with ServiceNow, Jira Service Management, Ivanti, Halo, Xurrent, Hornbill, and TeamDynamix. Therefore, teams should evaluate whether they need pure asset inventory or discovery-sourced ground truth for change management, incident response, and AI-ready IT operations.

What does Virima offer that Lansweeper does not?

Virima adds CI relationship modeling, ViVID™ service maps for application-to-infrastructure dependencies, CMDB health scoring, change impact analysis before change windows, full ITAM lifecycle tracking, and bidirectional sync with ServiceNow, Jira Service Management, Ivanti, Halo, Xurrent, Hornbill. Lansweeper provides the inventory layer. In contrast, Virima builds the discovery-sourced ground truth that ITSM, change management, and agentic IT operations require on top of it.

How much does Lansweeper cost?

Lansweeper uses SaaS-based pricing scaled by the number of assets in your environment. Specifically, tiered plans are available for environments of different sizes, and a free trial option is available for evaluation. For current pricing, contact Lansweeper directly, as it varies based on asset count and feature tier.

Is Lansweeper a CAASM tool?

Lansweeper positions itself under the “Cyber Asset Intelligence” category and supports several CAASM-adjacent use cases, including unmanaged device detection, CVE exposure tracking via NVD lookups, OT and IoT device classification, and AI usage monitoring across endpoints. However, teams with deep CAASM requirements often evaluate dedicated security tools alongside Lansweeper for full attack surface management coverage.

What is LsAgent and how does it work?

Specifically, LsAgent is Lansweeper’s lightweight endpoint agent for Windows, macOS, and Linux devices. Unlike agentless scanning (which requires network-accessible IP ranges and stored credentials), LsAgent runs locally on each device and captures inventory data on a configurable schedule (once per day by default). As a result, it is especially useful for remote, roaming, and off-network endpoints that credential-based scanning cannot reach.