🏷 Tags

What tags do — the short version

Tags are how SafeCadence ties everything together. They drive:

Groups — {filter:{field:'env',op:'eq',value:'prod'}} resolves to every asset tagged env:prod
Policies — "All prod Cisco gear" targets env:prod + vendor:cisco
AI enrichment — auto-sets role:, env:, criticality: from hostname/config
Compliance scope — compliance:pci tags drive the /scope page

Common tag families

env:prod / staging / dev site:dc1 / branch-nyc role:edge-router / core / access / db-server vendor:cisco / arista / palo-alto criticality:crown-jewel / high / medium compliance:pci / soc2 / hipaa team:network-eng / data-eng

Tags are added 3 ways: (1) AI enrichment when a device is discovered, (2) manually on any asset cockpit → Custom fields, (3) by editing a CSV on import.

Tag	Usage
Loading…

✎ rename = applies the new name to every asset that had the old tag. 🗑 delete = strips the tag from every asset (the assets stay).