ALVOR
Platform
Advisory
PricingBlog
Get Demo
ALVOR
Platform
Advisory
PricingBlog
Get Demo

Platform · Dependency Mapping

Every asset already knows what it touches.

Upstream and downstream dependencies on every asset, classified by service or data, scored by criticality, and built into the same record that holds the asset's vulnerabilities, continuity plan, and data governance.

See the mapAsset Management

Why it matters

A CMDB tells you what exists. A dependency map tells you what breaks.

Most security teams have an asset inventory. Some have a CMDB. Almost none have an accurate, current, criticality-scored dependency map of which assets rely on which, and how data flows between them. So when an incident hits, the blast radius is estimated in a meeting rather than read off a screen.

Alvor models dependencies as part of the asset record. Open any asset and you see its upstream services and data sources, its downstream consumers, and a criticality score on every link. The same register is where risks name the assets they affect and where continuity processes declare the assets they depend on, so each asset shows the strictest RTO and RPO those processes need.

Open an asset to see its blast radius and the continuity posture it inherits from the processes that depend on it.

On every asset

Open an asset. See its blast radius.

Five upstream services, three downstream consumers, every link criticality-scored. No tab-switching, no separate CMDB.

Upstream dependencies5

web-frontend:latest

High

vm-p-bastion-amd

Medium

Riyadh DR Data Center

Critical

orders-db-primary

High

EU Customer Portal

Medium

app.example.com

Web ApplicationMedium

alvor-github-actions

Medium

main.manage.suite

Medium

exec-analytics

Low
Downstream dependencies3
Upstream dependencies5

web-frontend:latest

High

vm-p-bastion-amd

Medium

Riyadh DR Data Center

Critical

orders-db-primary

High

EU Customer Portal

Medium

app.example.com

Web ApplicationMedium
Downstream dependencies3

alvor-github-actions

Medium

main.manage.suite

Medium

exec-analytics

Low
CriticalityCriticalHighMediumLow

Capabilities

What the dependency map gives you.

Built into the asset record, classified by type, scored by criticality, cross-linked across the platform.

Interactive dependency graph

Pan, zoom, and explore upstream and downstream dependencies as a node graph, with a synchronised list view alongside.

Service and data dependency types

Each link has a type, such as service dependency, data dependency, network dependency or authentication, and you can add your own. A type's flags decide whether it passes criticality along and whether it marks a trust edge.

Criticality scoring on every link

Each link carries a Critical, High, Medium or Low rating. A business service's criticality flows down its dependencies into each asset's effective criticality, and blast radius is read from the same edges.

Upstream and downstream counts

Every asset shows its dependency counts at a glance. Five upstream, three downstream: how many things does this asset hold up.

Linked to Risk and Business Continuity

Risks name the assets they affect, and continuity processes declare the assets they depend on. Each asset then shows the strictest RTO and RPO set by those processes' impact analyses.

Live with the asset, not in a CMDB

Dependencies live on the asset record, alongside components, vulnerabilities, continuity, and data governance.

Where it fits

A graph the rest of the platform reads from.

Module

Asset Management

The home of every dependency, component, vulnerability, plan, and data record.

Explore

Module

Risk Management

A risk names the assets it affects, chosen by live search of the register at intake.

Explore

Module

Business Continuity

Processes declare the assets they depend on, and each asset shows the strictest RTO and RPO those processes' approved BIAs set.

Explore

Questions

Common questions about
dependency mapping.

Every asset in Alvor carries its own dependency map. Open any asset and you see its upstream dependencies (what it depends on) and downstream dependencies (what depends on it) as an interactive graph, plus a flat list view. Each dependency has a relationship type, such as service dependency or data dependency, and a criticality rating (Critical, High, Medium, Low), so blast radius is visible at a glance.

Get started

See how Alvor works for your role

Whether you lead security, run IT, manage compliance, or sit in the C-suite - we'll show you your view.

Request DemoView Pricing
ALVOR

Security architecture management and compliance: connected into one source of truth.

Security,
Simplified.

Platform

  • Overview
  • AI Assistant
  • Secure by Design
  • Asset Management
  • Risk Management
  • Compliance
  • Policy
  • Security Management
  • Third-Party Risk Management
  • Business Continuity

Capabilities

  • Security Architecture
  • Security Design Review
  • Threat Modeling
  • Dependency Mapping
  • Data Governance
  • Components & SBOM
  • System Security Plan
  • Deployment models

Solutions

  • All solutions
  • CISO
  • Security architect
  • GRC lead
  • Engineering leader
  • Startups
  • Mid-Market
  • Enterprise
  • Regulated & Sovereign
  • Australia

Frameworks

  • ISO 27001
  • SOC 2
  • NIST CSF
  • HIPAA
  • GDPR
  • ISM
  • IRAP
  • Essential Eight
  • ASD Essentials
  • SABSA
  • PCI DSS
  • CMMC
  • FedRAMP
  • Control alignment

Advisory

  • Advisory overview
  • Assess
  • Architect
  • Build
  • Operate
  • All engagements

Company

  • About
  • Blog
  • Learn
  • Security
  • Pricing
  • Compare Alvor

© 2026 Alvor Pty Ltd · ABN 40 700 022 546 · All rights reserved.

PrivacyTermsCookie PolicyVulnerability Disclosure