The data cannot leave the perimeter
Procurement asks where packages, logs and credentials live before it asks what the tool does. "A vendor's cloud" is not an answer that survives the question.
Administration, healthcare, utilities, transport and defence support estates — run from one console that lives inside your own perimeter, on hardware you own.
Procurement asks where packages, logs and credentials live before it asks what the tool does. "A vendor's cloud" is not an answer that survives the question.
Machines sit on segmented networks with no route to the internet. A tool built around a hub you have to reach from outside cannot be deployed at all.
An inspection months from now asks who changed what, on which machine, and when. Shell history on the box is not a record.
Self-hosted deployment is the same binary: control plane, vault and agents all run on your own infrastructure, with no phone-home. Agents open the connection outwards to your server, so nothing outside your network has a way in to a machine. One operator sees the whole estate on one screen, live.
A real capture of the running product. Live data, no mockups.
Self-hosted deployment on an Enterprise agreement: the same binary, control plane and vault on your own infrastructure, no phone-home
Self-hosted, agents dial out to your own server — there is no inbound path from us to a machine
Every machine proves its identity with a per-machine certificate — no shared secrets
Four roles — principal, lead, engineer, observer — scoped down to a single realm or cell
Every point above is a shipped capability, on every plan — see the full list.
No fleet tool can certify an estate, and one that says otherwise is selling the wrong thing. What a security review or an inspection can be given is evidence: what runs where, who changed it, and who was allowed to.
Attributed history on every change: which version landed on which machine, when, started by whom
Access scoped to a single realm or cell, so a department administers its own estate and sees no other
The full audit log filters and exports to CSV, ready to hand over
Try it on five machines first, no card required. Self-hosted deployment comes with an Enterprise agreement.