The IT side of a deal comes in three parts: what the target looks like from outside, what you actually inherit inside, in its clouds and on its network, and the risks both turn up. MNA Tools has tools for each, built for the people who do that work.
Free · read-only and inside the scope you agree · your data stays with you · made in Canada
Before you signThe outside viewDeepReview profiles the target from public information.
From due diligenceThe inside view: the cloudsTenantShuttle reads the clouds you are taking on and plans where they go.
Day oneThe inside view: the networkSubnetSleuth inventories and maps the network you inherit.
Until it is closedThe risk registerHouseGRC holds every risk, with an owner and a date.Each works on its own, and each is built the same way: it stays inside the scope you set, it shows where every fact came from, and what it finds stays with you.
Outside view · Before you sign
See the target from outside, the way an attacker would: its domains, hosts, exposures and leaks, from public information.
Inside view: the clouds · Diligence to integration
Read the clouds you are taking on, read-only, see where each part could go, and plan the move without surprises.
Inside view: the network · Day one
Inventory and map the network you inherit, read-only and only inside the ranges you agree.
Risk register · Until it is closed
Log what the outside and inside views find as owned, dated risks, and track them through integration to the end.
The outside view and the inside view, of the clouds and of the network, each turn up things that need deciding. HouseGRC is where they land, so the deal team, the integration team and the people who inherit the result all work from the same list.
The hand-offs are yours to make: SubnetSleuth exports its inventory as CSV, which HouseGRC's asset import reads, and you promote DeepReview's and TenantShuttle's findings into the register as you triage them. Nothing passes between the tools on its own.
Each stage of a deal asks a different question of the IT team. Here is what each tool does at each one, with an example.
2Due diligenceTest what the target tells you, and score what is wrong.
3Signing to closingCheck the promised fixes and get ready for day one.
4Day one and 100 daysKnow what you inherited, then fix it in the right order.
5Fully integratedClose out the register and keep the documentation true.
In a deal you are a guest on the target's network until the day it becomes yours. The tools behave accordingly.
SubnetSleuth contacts only the ranges you give it and never the ones you rule out. TenantShuttle reads only what the access the company's administrators grant allows. DeepReview works from public information unless you switch on its active check for an assessment.
SubnetSleuth reads devices with SNMP GET and never sets anything. TenantShuttle checks every request against a reviewed list of reads before it is sent. Nothing you run changes a device, an account or a setting on the target's side.
Each DeepReview finding cites the public evidence behind it, and a lookup that failed is reported as failed, never as all clear. SubnetSleuth records where each fact about a host came from, and TenantShuttle lists what it could not read, with the reason.
SubnetSleuth and TenantShuttle keep their projects on your computer, TenantShuttle's encrypted, and HouseGRC runs on your own server, its database encrypted. None of them sends what you record to us.
MNA Tools grows with the work. More tools for the IT side of a deal are being built, and each one joins this page when it is ready.
Is there a part of a deal you still do by hand, with spreadsheets and screenshots? Ideas are welcome at [email protected], and they help decide what comes next.
SubnetSleuth and HouseGRC are free for any use, with a free licence key. DeepReview is free too, by invitation, and TenantShuttle on request.
