import Link from "next/link"; import { InstrumentPanel } from "@/components/InstrumentPanel"; export default function OverviewPage() { return ( <>
Self-hosted fleet control plane

Your servers, under one pane of glass you actually own.

Vantage holds SSH keys, runs scripts, watches services, stores secrets and opens consoles — across every machine you manage. One agent per server, outbound connections only, all state in your own database.

Create your organisation What it does

Free for 3 servers · Linux and Windows agents · Self-host the whole stack

The problem

Six tools, six sources of truth, one afternoon lost.

Most small fleets end up with keys in a spreadsheet, scripts in someone's home directory, uptime checks in a separate service, secrets in a chat thread, and no record of who ran what. None of those systems know about each other, so every question — who can reach this box, what ran on it last, is it even up — gets answered by hand.

ONE AGENT

Everything rides one connection

Keys, steps, checks and inventory all travel over the same outbound link. Installing a second thing is not the answer.

ONE RECORD

Every change is an audit event

Assignments, revocations, runs, console sessions and settings changes all land in the same log, attributed to a person.

Capabilities

One control plane, six jobs.

Access

SSH keys

Assign public keys per server and revoke them softly. The agent diffs desired state against the file and rewrites authorized_keys atomically.

  • fingerprint deduplication
  • agent-side keypair generation
  • revocation history preserved
Execution

Workflows

A library of bash and PowerShell steps with declared inputs, outputs and secret references, composed into workflows that target a set of servers.

  • live streamed step logs
  • stop, continue or retry on failure
  • values passed between steps
Uptime

Monitors

HTTP, TCP, ICMP and TLS checks, run either from the control plane or from an agent inside the target network.

  • incidents and uptime history
  • certificate expiry warnings
  • alerts to five channel types
Secrets

Vault

Grouped key/value secrets encrypted with AES-256-GCM, injected into workflow steps at execution and never written to logs.

  • read token for External Secrets Operator
  • rotatable, hashed at rest
  • reveal is an audited action
Access

Browser console

Open an SSH, RDP or VNC session in the browser. SSH authenticates with a stored key, and every session is recorded in the audit log.

  • one-time session tokens
  • credentials consumed on connect
  • no client software
Health

Inventory and updates

CPU, memory, swap, disks and kernel reported continuously, alongside pending OS package updates you can apply from the interface.

  • metrics every 30 seconds
  • one-click package updates
  • agents update themselves
Getting started

Four steps, and the first three take a minute.

FIRST

Create an organisation

You become the owner. Everything inside is invisible to every other organisation.

THEN

Add a server

Copy the install one-liner. It expires in an hour and works exactly once.

THEN

Assign a key

Paste a public key and tick the servers. It lands inside 30 seconds.

AFTER

Build from there

Add checks, write a step, invite the team, connect your identity provider.

                    # Linux
                    {"\n"}
                    curl -fsSL https://vantage.hostxtra.co.uk/install | bash -s -- --server-id=$ID --token=$TOKEN
                    {"\n\n"}
                    # Windows
                    {"\n"}
                    irm https://vantage.hostxtra.co.uk/install.ps1 | iex
                

Three servers, free, no card.

Create an organisation, install one agent, and watch a key land on a real box.

Create organisation
); }