thinQmaster Virtual testing partner Adaptive practice exams that find your weak spots and drill them. Every answer explained. From $69
Enroll

thinQmaster

Find your exam

Five questions free, before you decide.

Step 1 · choose a vendor

In one of our camps? Your practice exams come with the tuition — they are on your study page already.

Application & OT Security · Foundational

Application Inventory

A maintained catalog of an organization's applications, APIs and components with owners, data classification and risk ratings.

Definition

An inventory is the foundation of AppSec risk management: you cannot test or patch what you do not know exists. It records owners, technology stack, exposure, data handled and compliance scope, and links to SBOMs. Missing inventory leads to shadow and zombie APIs.

Example

The inventory shows 37 internet-facing apps handling cardholder data that require quarterly scans.

Exam tip

Asset/application inventory is usually the first step in any program-building question.

Related terms