Key Takeaways
- A software inventory lists both installed programs and cloud applications in use.
- Data sources include endpoint agents, browser extensions, directory services, and invoices.
- SWID tags under ISO/IEC 19770-2 support automated detection of installed software.
- The inventory shows presence, not active usage or license compliance.
What does a software inventory contain?
For each application, a software inventory records the details needed for security, cost tracking, and licensing.
- Application name, vendor, and version
- Device, account, or person to which the software is assigned
- Source and timestamp of discovery
- Responsible person or owning team
- Status, such as approved, under review, or rejected
How is a software inventory created?
A software inventory is built most reliably through automation. Endpoint agents on devices report installed programs, browser extensions detect web applications in use, and invoices reveal paid subscriptions. Manual spreadsheets become outdated quickly because new tools are adopted without notification. NIST describes SWID tags as a standardized foundation for automatically collected inventory data.
Why does a small or medium-sized business need a software inventory?
Without a software inventory, basic questions remain unanswered: Which programs have known vulnerabilities, which tools store customer data, and which subscriptions are still running? The inventory is the foundation for license management, security reviews, and offboarding, because only known software can be audited and reclaimed.
Example: Software Inventory in practice
Example: A tax advisory firm with 35 employees previously tracked its software in a spreadsheet with 18 entries. After rolling out an endpoint agent and a browser extension, the inventory reveals 54 applications, including 21 web apps that individual employees had signed up for on their own.
Software Inventory vs. License Management
| Aspect | Software Inventory | License Management |
|---|---|---|
| Core question | Which software is present? | Do we hold matching usage rights? |
| Data basis | Installations and discovered apps | Contracts, license quantities, assignments |
| Output | Directory of the software estate | Reconciliation of demand and entitlements |
| Sequence | Foundation | Builds on top of the inventory |
The software inventory shows which software exists in the company, whereas license management verifies whether appropriate and sufficient usage rights exist for it.
How does Sovaro help with Software Inventory?
Sovaro builds the software inventory automatically: the Sovaro Agent and browser extension detect apps in use, even without SSO. A setup link installs the MDM and browser extension in a single step. AI categorizes newly discovered apps, while the team decides on approval.