CHAI DART™  ·  Software Portfolio Classification
COTS vs Non-COTS
Analysis
Classification of a running enterprise estate discovered via AWS MAP / ADS — powered by CHAI DART™ Tri-Vector Assessment
Sample Customer
Media & Broadcasting Enterprise (anonymized)
Scope
43 hosts  ·  845 processes  ·  225 products
Report
Sample v1.0  ·  April 2026

Executive Summary

CloudHedge CHAI DART™ was applied to the customer's AWS Migration Acceleration Program (MAP) discovery export — a raw inventory of every process, service and binary running across the in-scope estate. DART's Dynamic Context Engine classified each component against its curated knowledge base of 4,000+ enterprise software products, resolving vendor, licensing model, category and rationalization posture.

146
COTS Products  ·  66.3%
37
Open-Source Products  ·  26.7%
40
Non-COTS / Custom  ·  6.0%
2
Unclassified  ·  0.9%
COTS · 66.3%
OSS · 26.7%
Custom · 6%
COTS Open-Source Non-COTS (Custom) Unclassified

Classification coverage: 99.1% of the running estate automatically classified. The remaining 0.9% (2 components) are routed to the CHAI curation workflow — typically resolved in under a day per engagement.

What this tells the migration team

Method

2.1 What gets classified

Every row in the MAP components.csv export: a running process or Windows service on a discovered host, with its binary path, command line, technology-stack tags, and MAP-assigned component type.

2.2 How DART classifies

  1. Normalization — de-duplicate across hosts (e.g. 42 instances of vmtoolsd.exe → 1 product entry).
  2. Rule match against DART's curated knowledge base of 4,000+ enterprise products across OS, databases, middleware, app servers, CI/CD, monitoring, security, backup/DR, ERP, broadcast & media.
  3. Vendor + category + licensing resolution with a confidence score.
  4. Tri-Vector overlay — cross-validated against Technical Complexity, Business Criticality, and Migration Readiness.
  5. Curation queue — anything below confidence threshold is auto-resolved against vendor knowledge graphs or escalated for human review.

2.3 Classification taxonomy

Class Definition
COTS Commercial Off-the-Shelf software licensed from a third-party ISV. Includes Microsoft OS components — these ship under the paid Windows Server license.
Open-Source Freely licensed community software (Apache-2.0, GPL, MIT, BSD, MPL). Free to deploy — paid enterprise tiers are optional.
Non-COTS (Custom) Bespoke, internally developed applications — customer-owned code. In this sample: IIS-hosted internal web applications.
Unclassified Component name not matched against the DART knowledge base with sufficient confidence. Routed to curation.

Classification Breakdown

3.1 By unique product

Class Unique Products Share
COTS 146 64.9%
Non-COTS (Custom) 40 17.8%
Open-Source 37 16.4%
Unclassified 2 0.9%
Total 225 100%

3.2 By running footprint (weighted by process instance)

Class Instances Share
COTS 560 66.3%
Open-Source 226 26.7%
Non-COTS (Custom) 51 6.0%
Unclassified 8 0.9%
Total 845 100%

Why the two views differ. The Custom cohort has many distinct apps (each IIS site = one product) but low process count (one worker per site). COTS products run widely — VMware Tools and Defender run on every Windows host.

Top Vendors (COTS + OSS)

# Vendor Products Representative Components
1 Microsoft 71 Windows Server, SQL Server, SCCM, Defender, SCOM, IIS, Office, Edge, OneDrive, MSMQ
2 Veritas 27 Enterprise Vault (archiving, eDiscovery, storage, monitoring)
3 McAfee / Trellix 15 ENS — AV, EDR, Threat Prevention
4 Sage Group 7 Sage 300 ERP (Financials, CNA, web apps)
5 VMware / Broadcom 5 VMware Tools, vCenter Converter
5 Erlang OTP / VMware 5 RabbitMQ + Erlang runtime
7 Zabbix SIA 4 Zabbix Agent, Agent 2, Server
8 Zoho / ManageEngine 3 AssetExplorer, Patch Manager
8 SoundMouse 3 Broadcast music reporting (SkyFall, AudioSummaryExtractor)
8 Genetec 3 Security Center VMS agent
8 MongoDB Inc. 3 MongoDB + Robo 3T
8 PostgreSQL Global Dev Group 3 PostgreSQL 15 & 17
8 PHP Group 3 PHP-FPM 7.3, 7.4, 8.3

Cloud-migration implications by vendor

Top Categories

Category Unique Products
Custom Web Application (IIS)39
Windows OS Utility28
Enterprise Archiving / eDiscovery (Veritas Vault)27
Endpoint Security (EDR/AV)15
Database Tooling12
Database (RDBMS)7
ERP / Financials (Sage 300)7
Monitoring7
Application Runtime5
Messaging (RabbitMQ / Erlang)5
Monitoring (SCOM)4
Messaging / WCF4
IT Asset / Patch Management3
Broadcast Scheduling (SoundMouse)3
NoSQL Database (MongoDB)3

Non-COTS (Custom) Inventory

The Non-COTS cohort is concentrated in bespoke web applications hosted under IIS. This is the true modernization surface area.

# Application (IIS Site) Hosts Likely Function
1Default Web Site / c191COVID-19 internal tool
2Default Web Site / community1Community/portal
3Default Web Site / dashboard1Internal analytics dashboard
4Default Web Site / election20201Editorial election coverage
5Default Web Site / breaking20201Editorial breaking-news tool
6Default Web Site / gatepass1Facility access management
7Default Web Site / gfxrequest1Graphics request workflow
8Default Web Site / leave1HR leave management
9Default Web Site / marketdata1Market data feed app
10Default Web Site / policies1HR policy portal
11Default Web Site / screens1Digital signage controller
12Default Web Site / telescope1Custom monitoring app
13Default Web Site / timeapp & /testtime2Staff time tracking
14Default Web Site / vehicle1Fleet management
15Default Web Site / voice1Voice/UC integration
16Default HTTPS / agef, /gatepass, /timeapp3HTTPS bespoke apps
17processtimecache / cacher1Internal caching service
18stream-monitor (Linux)1Custom broadcast stream monitor

… plus 20 additional bespoke IIS sites — see full CSV

Modernization posture. All 40 Custom apps are candidates for Re-platform to containers (ECS / App Runner) or Re-factor to serverless (Lambda + API Gateway), depending on complexity. This is where AWS MAP funding produces the highest migration velocity multiplier.

Unclassified — CHAI Curation Queue

# Component Instances Hosts Why Unclassified Action
1 vtosnapi.exe 2 2 No vendor signature in DART KB. Binary name suggests "VTO Snap API" — likely a custom or regional integration component. Short curation pass — read binary signature + SME confirm
2 win32sysinfo.exe 6 6 Ambiguous name — bundled with several EDR/patching suites. Binary lives under multiple install paths. Binary fingerprint hash lookup against vendor KBs

This is the ~5–10% "obscure or regional" cohort we flagged in AWS seller discussion. In this sample it is 0.9% of the running footprint — well within CHAI's autoclassification ceiling. Curation resolves in under one day per engagement.

Known Limitations

  1. Auto-classification ceiling. DART's curated KB covers the Top 300+ enterprise products (≈95–98% of typical estates). Obscure, regional, or niche vendor products are routed to curation rather than auto-classified.
  2. Binary-name ambiguity. Some Windows binaries share names across vendors. DART uses path + command-line + publisher-signature disambiguation; a small residual pool may need human curation.
  3. Custom-code detection. DART identifies Non-COTS by exclusion. Custom code deployed under filenames matching vendor binaries may need manual override.
  4. Licensing model nuance. Products with both commercial and OSS editions (JBoss EAP vs WildFly, Oracle JDK vs OpenJDK) default to the most likely edition based on path signals — final verification against customer SAM records recommended.
  5. Snapshot-in-time. Dormant binaries, batch-invoked tools, and seasonal software may be underrepresented.
  6. OS-bundled vs explicitly-licensed. Microsoft built-in utilities are classified as COTS / Microsoft since they ride on a paid Windows Server license. DART supports a separate "OS-bundled" view on request.

Recommended Next Steps

  1. Full DART assessment — this sample is classification only. A complete DART engagement adds Tri-Vector scoring, 6R rationalization per workload, TCO & TCM modelling, and practitioner reports (CIO, CTO, Migration Architect views).
  2. SAM data join — ingest the customer's license management export (Flexera, ServiceNow SAM) for per-product license true-up.
  3. Custom-app deep dive — inventory-level detail on each of the 40 Non-COTS IIS apps: LOC, language stack, data dependencies, business criticality, modernization strategy.
  4. Curation pass — 1-day turnaround to resolve the 2 unclassified components.

About CloudHedge & CHAI™

"Migrate Anything. Modernize Everything. Break Nothing."

CloudHedge Technologies Inc. is an Agentic AI company that modernizes legacy enterprise applications into cloud-native and AI-native systems using CHAI™, its patented Context Rich Harness platform. With 40 humans and 65 AI agents, CloudHedge delivers migration at a velocity and depth no traditional services firm can match.

900+
Apps on EKS
600%
Faster Migration
Velocity Uplift
40%
Cost Reduction
200K+
Hours Saved
45%
Migrations Fail Without Deep Assessment
CHAI DART™
Discovery, Assessment & Rationalization. Tri-Vector scoring across Technical Complexity, Business Criticality, and Migration Readiness. Produces CIO, CTO, and Migration Architect practitioner reports.
CHAI Flow™
Agentic workflow orchestration engine. Executes migration recipes through chained AI agents — from source-code analysis through refactoring, testing, and cloud deployment.
CHAI Universe™
Unified harness combining DART + Flow + Dynamic Context Engine + Recipes + Reinforcement Learning. The complete platform for enterprise-scale legacy modernization.
Recognition
Gartner Cool Vendor 2022  ·  AWS ISV Accelerate Partner  ·  AWS MAP Qualified Partner  ·  Active SAIC & DOT TCloud deployments
Headquarters
CloudHedge Technologies Inc.
Iselin, NJ  ·  Pune, India  ·  Singapore  ·  Reston, VA
Contact
Enterprise inquiries: chai@cloudhedge.io
AWS MAP engagements: contact your AWS Partner Development Manager and request CloudHedge CHAI DART™ discovery.