Companies + tags
Group targets by business unit, acquisition, or product. Filter findings per-tenant; share scoped reports.
Last updated May 27, 2026
What it is
Two orthogonal organising axes that sit beside your raw target list:
- Companies: a foreign-key on every target. One target belongs to one company at a time. Use it for acquisitions, business units, customers (if you’re an MSSP), portfolio holdings.
- Tags: free-form many-to-many strings on targets. Use them for
cross-cutting concerns:
pci,prod,q4-audit,team-payments.
What it produces
- Companies live in their own table; each has a name + slug + asset inventory.
- Tags are stored per target and roll up into the SmartSearch token
grammar (
tag:pci).
What to use it for
- MSSPs / consultancies: one workspace per customer feels heavy; one company per customer inside one workspace is exactly the granularity that works.
- Acquisitions: drop newly-acquired companies into their own bucket; report on their surface separately during integration.
- Compliance scoping:
tag:pciis a one-token query that pulls every host in your PCI scope. - Per-customer reports: the per-target report can be filtered by company and shared via cinematic replay.
Why it matters
A flat target list is fine until you have 200 of them. Past that, every conversation starts with “wait, which environment is this in?” The two-axis grouping fixes that without forcing you into a hierarchy that breaks the first time someone asks about a cross-cutting concern (everything that’s PCI, regardless of company).
Why it’s valuable
- No workspace split needed for MSSPs. Companies do the work one-workspace-per-customer would otherwise force.
- Tags are cheap. Add
q4-auditto 30 targets; remove it when the audit’s over. - First-class in every filter.
company:Reddit kev:true,tag:pci severity:critical, etc.
How to use it
Admin → Companies → Add company. Then on each target’s edit drawer, pick the company. Tags are an inline editor on the target list. Click a target row, type a tag, hit enter.
In SmartSearch:
company:"Acme" kev:true # KEV exposure for one company
tag:pci severity:critical # critical findings in PCI scope
company:"NewCo Acquisition" age:7d # newly-acquired surface, 7d