import Link from "next/link"; import { InstrumentPanel } from "@/components/InstrumentPanel"; export default function OverviewPage() { return ( <>
Self-hosted fleet control plane

Your servers, under one pane of glass you actually own.

Vantage holds SSH keys, runs scripts, watches services, stores secrets and opens consoles across every machine you manage. One agent per server, outbound connections only, all state in your own database.

Create your organisation What it does

Free for 3 servers · Linux and Windows agents · Self-host the whole stack

The problem

Six tools, six sources of truth, one afternoon lost.

Most small fleets end up with keys in a spreadsheet, scripts in someone's home directory, uptime checks in a separate service, secrets in a chat thread, and no record of who ran what. None of those systems know about each other, so every question who can reach this box, what ran on it last, is it even up gets answered by hand.

ONE AGENT

Everything rides one connection

Keys, steps, checks and inventory all travel over the same outbound link. Installing a second thing is not the answer.

ONE RECORD

Every change is an audit event

Assignments, revocations, runs, console sessions and settings changes all land in the same log, attributed to a person.

Capabilities

One control plane, six jobs.

Access

SSH keys

Assign public keys per server and revoke them softly. The agent diffs desired state against the file and rewrites authorized_keys atomically.

  • fingerprint deduplication
  • agent-side keypair generation
  • revocation history preserved
Execution

Workflows

A library of bash and PowerShell steps with declared inputs, outputs and secret references, composed into workflows that target a set of servers.

  • live streamed step logs
  • stop, continue or retry on failure
  • values passed between steps
Uptime

Monitors

HTTP, TCP, ICMP and TLS checks, run either from the control plane or from an agent inside the target network.

  • incidents and uptime history
  • certificate expiry warnings
  • alerts to five channel types
Secrets

Vault

Grouped key/value secrets encrypted with AES-256-GCM, injected into workflow steps at execution and never written to logs.

  • read token for External Secrets Operator
  • rotatable, hashed at rest
  • reveal is an audited action
Access

Browser console

Open an SSH, RDP or VNC session in the browser. SSH authenticates with a stored key, and every session is recorded in the audit log.

  • one-time session tokens
  • credentials consumed on connect
  • no client software
Health

Inventory and updates

CPU, memory, swap, disks and kernel reported continuously, alongside pending OS package updates you can apply from the interface.

  • metrics every 30 seconds
  • one-click package updates
  • agents update themselves
Getting started

Four steps, and the first three take a minute.

FIRST

Create an organisation

You become the owner. Everything inside is invisible to every other organisation.

THEN

Add a server

Copy the install one-liner. It expires in an hour and works exactly once.

THEN

Assign a key

Paste a public key and tick the servers. It lands inside 30 seconds.

AFTER

Build from there

Add checks, write a step, invite the team, connect your identity provider.

                    # Linux
                    {"\n"}
                    curl -fsSL https://vantage.hostxtra.co.uk/install | bash -s -- --server-id=$ID --token=$TOKEN
                    {"\n\n"}
                    # Windows
                    {"\n"}
                    irm https://vantage.hostxtra.co.uk/install.ps1 | iex
                

Three servers, free, no card.

Create an organisation, install one agent, and watch a key land on a real box.

Create organisation
); }