Working with your devices
Inventory
Every agent reports its hardware, operating system, disks, network adapters and installed software, plus the state of Microsoft Defender, the firewall and BitLocker.
- Customers, sites and devices, with filters, bulk actions and a quick search (Ctrl+K).
- Your own custom fields for devices and customers — asset number, warranty, contract — also through the API.
Monitoring and alerts
CPU, memory, disk space, offline devices, stopped services, Defender or firewall off, pending restarts, disk health (SMART, RAID), Windows event log and process monitors, and network checks (ping, TCP, web pages and certificates) run from the devices.
- History from 24 hours to 90 days and a forecast when a disk will be full.
- Alerts by email, Slack, Microsoft Teams or signed webhooks.
Remote desktop
Remote desktop in the browser for Windows and Linux (X11) — nothing to install for the technician.
- Sign-in and UAC screens, several monitors, text clipboard both ways, file copy with Ctrl+C / Ctrl+V.
- An optional notice on the remote screen tells the user that someone is connected.
Terminal and files
A terminal in the browser — PowerShell as SYSTEM on Windows, a root shell on Linux — and a file manager with upload, download and ZIP.
- Processes and services, restart and shutdown.
- Registry editor and scheduled tasks on Windows.
Scripts
PowerShell, cmd, bash and sh on one device, on many at once or on a schedule, from a shared script library.
- Results per device; every action is a task you can follow, cancel or stop.
- Tasks for offline devices wait until they come back.
Updates and software
Missing Windows updates and Linux packages (apt, dnf), installed by hand or on a schedule; programs through winget and optionally Chocolatey; your own MSI/EXE library deployed silently to many devices.
- Every installed program listed and silently uninstalled.
- Update rings, restart deadlines and maintenance windows.
Policies
Windows Update, required software (installed automatically when missing), blocked programs, program updates with update rings, restarts with a deadline, maintenance windows, network checks, alert rules, event log and process monitors, automations and BitLocker — per customer, site or device. Every new customer gets its own Default policy, and the most specific assignment wins.
BitLocker and vulnerabilities
BitLocker
Switched on by policy; recovery keys are collected and kept encrypted on the server and shown to administrators only after a password check.
Vulnerabilities
Installed programs checked against NVD (common Windows programs) and OSV (Debian and Ubuntu packages), per device and across all devices, with alerts for critical ones.
Reports
Per customer: devices, updates, alerts and the work of your technicians — printable, or emailed automatically every week or month.
Management
- Users: roles (administrator, technician, read-only) and per-customer access; two-factor sign-in for every account; Active Directory / LDAP and single sign-on with OpenID Connect or SAML.
- Activity and audit: every action on a device is a task with its history; a tamper-evident, hash-chained audit log.
- API: a REST API with personal tokens (never more rights than the user), documented in the console.
- Deployment: MSI with an enrollment code; a ready Group Policy startup script and Microsoft Intune Win32 app settings on every site page; Linux agents for x86-64 and ARM64.
- Server: Let's Encrypt or your own certificate, signed self-update (official or testing channel) with automatic rollback, daily console backup (optionally encrypted, copied over SFTP) with restore, network and time zone from the console, diagnostics without secrets.
- Agents: update themselves to the server's version; a small tray icon shows the connection and who manages the computer.
14 languages
The console, its built-in guide and the agent's tray window are available in English, German, French, Spanish, Italian, Portuguese, Dutch, Polish, Czech, Serbian, Turkish, Russian, Chinese and Japanese. Each user picks their own language.
Supported systems
| Component | Systems |
|---|---|
| Server | Ready-made appliance (OVA, qcow2, VHDX, ISO), Docker image, or Debian, Ubuntu, AlmaLinux / Rocky Linux (x86-64) with PostgreSQL |
| Windows agent | Windows 10 and 11, Windows Server 2016 and newer (64-bit) |
| Linux agent | Linux with systemd on x86-64 or ARM64 (Debian, Ubuntu, AlmaLinux, Rocky Linux and others); remote desktop needs X11 |
| Console | Any current browser |