v1.0.0-beta.4public beta

Know what you have, where it is, and who has it.

ITAMbox is the open-source system of record for IT assets, from request to retirement. Hardware, stock, software, licenses, procurement, custody and audits in one tenant-aware app you host yourself.

Apache-2.0Django + PostgreSQLamd64 · arm64
A tour through the live demo: searching for a MacBook and opening its record, scanning two assets into a check-out basket, reviewing Microsoft 365 seat assignments, and switching the active customer tenant.

Why ITAMbox

Your IT estate, without the spreadsheet archaeology

One record per asset

See each asset's owner, location, cost, warranty, assigned software and change history on one page.

Built for MSPs, too

Customer tenants, tenant groups and delegated access are part of the authorization model.

Yours to run

Apache-2.0 and self-hosted with Docker. You control data retention and upgrade timing.

Procure, track and audit

Keep every stage of the asset lifecycle connected

Requests become purchase orders, received items enter stock, and stock becomes assigned assets. Each record stays linked to the previous stage, so you can trace why an asset was acquired later.

A purchase order in the demo with supplier, delivery location, line items and total value.

Requests and approvals

Asset requests with an approval flow and optional auto-approval thresholds.

Purchase orders and contracts

Suppliers, line items, receiving and contracts in the same system as the assets.

Stock that knows its origin

Accessories, consumables and components with stock levels and low-stock alerts.

Tenant-aware by design

Manage multiple customers from one installation

Tenant boundaries are enforced by the authorization model, not added as a filter. Internal IT teams can manage one organization; MSPs can manage multiple customers with explicitly delegated access.

  • Tenants, tenant groups and per-tenant roles
  • Expiring resource grants for cross-tenant access
  • LDAP, SAML and OIDC sign-in, configurable per tenant
A tenant in the demo with its details and related inventory counts.
ITAMbox dashboard on a phone

Deployment and integrations

Self-host, integrate and import

Release images are available for amd64 and arm64, with build provenance and SBOM attestations. ITAMbox provides a REST API with OpenAPI documentation, a scoped GraphQL schema and outbound webhooks.

  • Docker Compose with PostgreSQL 15+ and Valkey
  • Startup fails closed on unsafe secrets
  • Snipe-IT importer with a --dry-run preview, plus CSV, TSV and YAML bulk import
Installation guide
run
docker pull ghcr.io/itambox-community/itambox-webapp:1.0.0-beta.4
migrate from Snipe-IT
python manage.py import_snipeit \
  --url https://snipe.example \
  --token-env SNIPEIT_TOKEN \
  --tenant your-tenant \
  --dry-run
REST API
curl -H "Authorization: Token $ITAMBOX_TOKEN" \
  https://itambox.example/api/assets/assets/

Try the public demo

Explore realistic sample data

Choose an account, copy its username, then open the demo login and enter the shared password. Credentials are not filled in automatically.

Demo data may be reset at any time, and the demo redeploys on every merge to main. Do not enter personal, confidential or production data.

FAQ

Questions before you install

Is ITAMbox ready for production?
ITAMbox is in public beta. Most capabilities are Stable, while Beta and Experimental capabilities may still change; the opt-in plugin system is Experimental. Use it for evaluation and controlled pilots with tested backups, and check the capability maturity guide before relying on a capability.
What does it cost?
There is no license fee. ITAMbox is open source under the Apache-2.0 license; you provide and operate the infrastructure.
Can I migrate from Snipe-IT?
Yes. The import_snipeit command reads from the Snipe-IT API, maps assets, accessories, consumables, components, licenses and maintenance records. Use --dry-run to preview an import. MSPs can map Snipe-IT companies to tenants; other sources can use CSV, TSV or YAML bulk import.
Which database do I need?
PostgreSQL 15 or newer. SQLite is not supported. Production deployments also use Valkey or Redis for shared cache and rate-limit state.
How does sign-in work?
ITAMbox supports local accounts with TOTP for privileged users, plus LDAP, SAML and OIDC configured per tenant. SCIM provisioning lets your identity provider manage users.
Can I automate it?
Yes. ITAMbox provides a token-authenticated REST API with OpenAPI documentation, a scoped GraphQL schema, outbound webhooks with event rules and scheduled reports.

Explore the demo, then run ITAMbox yourself.