Access
SSH keys
Assign public keys per server and revoke them softly. The agent diffs desired state against the file and
rewrites authorized_keys atomically.
- fingerprint deduplication
- agent-side keypair generation
- revocation history preserved
Execution
Workflows
A library of bash and PowerShell steps with declared inputs, outputs and secret references, composed into
workflows that target a set of servers.
- live streamed step logs
- stop, continue or retry on failure
- values passed between steps
Uptime
Monitors
HTTP, TCP, ICMP and TLS checks, run either from the control plane or from an agent inside the target
network.
- incidents and uptime history
- certificate expiry warnings
- alerts to five channel types
Secrets
Vault
Grouped key/value secrets encrypted with AES-256-GCM, injected into workflow steps at execution and never
written to logs.
- read token for External Secrets Operator
- rotatable, hashed at rest
- reveal is an audited action
Access
Browser console
Open an SSH, RDP or VNC session in the browser. SSH authenticates with a stored key, and every session is
recorded in the audit log.
- one-time session tokens
- credentials consumed on connect
- no client software
Health
Inventory and updates
CPU, memory, swap, disks and kernel reported continuously, alongside pending OS package updates you can
apply from the interface.
- metrics every 30 seconds
- one-click package updates
- agents update themselves