Sprawl

How many versions of everything are you actually running? Export the software inventory you already have - Intune, SCCM, or your RMM - and drop the CSV here. You get every application that exists at more than one version on your fleet, worst first, plus anything the vendor stopped patching.

Runs entirely in your browser. Nothing is uploaded, stored, or sent to us.

1Get your export

Any CSV with an application-name column works. Pick where your inventory lives:

2Drop the CSV here

What this is

This is the software report from RFF, run on your own export instead of on data we collect. Same normalization, same suppression rules, same curated end-of-support list. If you want it to run continuously against your fleet rather than against a CSV you exported by hand, that is the product.

It is open source, like the rest of the free tools: github.com/deadarcher/sprawl. Read the analysis, disagree with a rule, or add an end-of-life fact. Open an issue if a vendor's naming defeats the family matcher. That is the part that always needs real-world data.

Questions

What is software sprawl?

The same application running at many different versions across your fleet at the same time. Seven Java 8 update levels, four Citrix Workspace majors, three Notepad++ builds. Each version is a separate thing to test, patch and support, and most teams cannot say how many they have until they count.

How do I export software inventory from Intune?

In Intune go to Apps, then Monitor, then Discovered apps, and use Export. You get a CSV with the application name, version and how many devices have it. Drop that file here.

How do I export software inventory from SCCM, MECM or Configuration Manager?

It is the same product under three names - SCCM, MECM, and Configuration Manager. In any of them, run the "All Software Details" or "Installed software on a specific computer" report and export it to CSV, or query v_GS_INSTALLED_SOFTWARE / v_Add_Remove_Programs directly. Any export with an application name column works.

Is my inventory uploaded anywhere?

No. The file is read and analysed entirely in your browser using JavaScript. Nothing is uploaded, stored, or sent to us, and there is no account. You can verify it: open your browser developer tools and watch the network tab, or disconnect from the network before dropping the file - it still works.

Why are Visual C++ redistributables not counted as sprawl?

Because many concurrent versions of them are correct. Side-by-side runtimes are designed to coexist - applications bind to a specific major version - so one machine legitimately carries six of them. Counting those would bury the signal under the only rows nobody can act on. The same goes for .NET runtimes, MUI language packs, driver packages and Office shared components.

Where do the end-of-life dates come from?

Published vendor end-of-support dates, curated by hand. Where a date is genuinely unclear it is left out rather than guessed, because a false "this is end of life" costs you a pointless migration project.

Does this work with RMM exports?

Yes. Any CSV with a column for the application name works - NinjaOne, Action1, PDQ, Lansweeper, Tanium, or a PowerShell export of Win32_Product. If the columns are not recognised automatically you can map them by hand.