Machine tools increasingly comprise a heterogeneous set of connected devices: programmable logic controllers (PLCs), numerical controllers, human–machine interfaces (HMIs), industrial PCs, edge gateways, sensors, and actuators. Each subsystem runs software and firmware supplied by different vendors, updated on different cadences, and integrated late in the delivery chain. This heterogeneity creates blind spots that hinder vulnerability management and lifecycle control. When a machine is customised or reconfigured, the inventory rapidly diverges from design documentation. Operators and builders therefore need a reliable mechanism to enumerate hardware and software components, including exact firmware versions and configuration context, without assuming prior knowledge of the topolog ...