It watches itself.
Then proves it.
A growing set of connected operational foundations, so the AI story on the rest of this site has something real underneath it — not a demo, a running control plane with explicit endpoint trust, data-plane boundaries, and AI-agent security evidence.
Every heartbeat is a compliance check.
A desired-state policy pairs a telemetry state key with a comparison against tenant-wide or per-endpoint scope. Every daemon heartbeat carries a full state snapshot; the control plane evaluates it for drift the moment it arrives.
Remediable findings still go through the same Decision Engine and command ACL as everything else. Auto-execute verdicts get Ed25519-signed and pushed live; everything else becomes a pending approval.
One queue, not five dashboards of noise.
Every signal producer — drift today, more sources on the roadmap — raises into the same queue through one entry point. A flapping check bumps an occurrence count instead of spamming duplicate tickets.
One dedup-aware queue your technicians actually watch, instead of five noisy ones they’ve learned to ignore.
Two seeded baselines. Versioned, not one-off.
Applying a pack instantiates versioned desired-state policies across a tenant or a single endpoint. Re-applying reconciles by state key without touching anything you’ve hand-authored.
Bounded Windows and Linux collectors now report the seeded baseline keys and fail closed when a probe cannot produce an explicit result. Broad remediation and macOS coverage remain roadmap work.
Directory sync today. SSO login is next.
Three working connectors pull directory users, groups, memberships and MFA state read-only for access review — Graph API, Okta’s management API, and the Admin SDK Directory API.
Worth being precise about: this is visibility into who has access, not a login button. We’d rather ship half the feature honestly labeled than the whole feature vaguely implied.
One config value between local keys and shared custody.
Every endpoint’s Ed25519 signing key lives in one of two places, selectable per deployment — not a hardcoded assumption baked in at install time.
That’s not a cosmetic option. It’s what moves signing keys out of local disk and into shared, envelope-encrypted storage — one scale-out blocker removed, not a scale-out claim.
Seventeen reports your MSP already needed.
Built from the platform’s own data, not a separate BI tool bolted on top. Generate on demand, or set a schedule that fans out one report per endpoint group and emails it.
The mailer stays off until you turn it on. No test run has ever opened a real SMTP socket, on purpose.
A real catalog, fed by the fleet.
A global application catalog matches against endpoint software on every heartbeat. Unmatched software drops into a review queue instead of silently vanishing. A newer layer adds per-application CVE tracking on top: matched installs are checked against a real vulnerability feed, and findings can trigger remediation.
Worth being precise about: the matching is exact/substring logic today, not AI. The daemon ships a Windows, Linux and macOS software inventory collector — Get-Package and registry uninstall keys on Windows, dpkg, rpm, and system_profiler — that populates software.installed on every heartbeat, refreshes on a self-schedule, and can be pulled on demand through the read-only SOFT_INVENTORY command. Live CVE-feed syncing has no scheduler wired up yet either; it runs on demand and in tests.
Signals now have a durable path.
The control plane now has a bounded canonical monitoring contract, authenticated ingestion routes, an external OpenSearch sink, and an optional JetStream admission path that acknowledges only after persistence.
That is the important difference: overload, malformed payloads, and downstream failures have named places to land — queue health, platform alerts, and quarantine/replay — instead of disappearing into a best-effort log.
More of the fleet and AI lifecycle now shares the gate.
Model rollout, application maintenance, migration, customer visibility, action discovery, and AI-agent posture now connect to the same tenant, alert, approval, signing, and audit foundations — with their unfinished edges stated plainly.