The IT side of a deal comes in three parts: what the target looks like from outside, what you actually inherit inside, and the risks both turn up. MNA Tools has a tool for each, built for the people who do that work.
Read-only and inside the scope you agree · your data stays with you · made in Canada
Before you signThe outside viewDeepReview profiles the target from public information.
Day oneThe inside viewSubnetSleuth inventories and maps the network you inherit.
Until it is closedThe risk registerHouseGRC holds every risk, with an owner and a date.Each works on its own, and each is built the same way: it stays inside the scope you set, it shows where every fact came from, and what it finds stays with you.
Outside view · Before you sign
See the target from outside, the way an attacker would: its domains, hosts, exposures and leaks, from public information.
Inside view · Day one
Inventory and map the network you inherit, read-only and only inside the ranges you agree.
Risk register · Until it is closed
Log what both views find as owned, dated risks, and track them through integration to the end.
The outside view and the inside view each turn up things that need deciding. HouseGRC is where they land, so the deal team, the integration team and the people who inherit the result all work from the same list.
The hand-offs are yours to make: SubnetSleuth exports its inventory as CSV, which HouseGRC's asset import reads, and you promote DeepReview's findings into the register as you triage them. Nothing passes between the tools on its own.
Each stage of a deal asks a different question of the IT team. Here is what each tool does at each one, with an example.
2Due diligenceTest what the target tells you, and score what is wrong.
3Signing to closingCheck the promised fixes and get ready for day one.
4Day one and 100 daysKnow what you inherited, then fix it in the right order.
5Fully integratedClose out the register and keep the documentation true.
In a deal you are a guest on the target's network until the day it becomes yours. The tools behave accordingly.
SubnetSleuth contacts only the ranges you give it and never the ones you rule out. DeepReview works from public information unless you switch on its active check for an assessment.
SubnetSleuth reads devices with SNMP GET and never sets anything. Nothing you run changes a device, an account or a setting on the target's side.
Each DeepReview finding cites the public evidence behind it, and a lookup that failed is reported as failed, never as all clear. SubnetSleuth records where each fact about a host came from.
SubnetSleuth keeps its project on your computer and HouseGRC runs on your own server, its database encrypted. Neither sends what you record to us.
MNA Tools grows with the work. More tools for the IT side of a deal are being built, and each one joins this page when it is ready.
Is there a part of a deal you still do by hand, with spreadsheets and screenshots? Tell us about it at [email protected]. It helps decide what comes next.
SubnetSleuth and HouseGRC are currently free for personal use, and organisations can license them by quote. DeepReview assessments are available on request.
