fleetd
Monitor and control your servers and routers. Even a compromised server cannot run a single command on them.
Commands signed in your browser
Every command and terminal session is signed with a key that never leaves your browser. Agents refuse everything else, so the server is not a single point of failure.
Agents dial out
Machines need no open ports and work behind NAT. Traffic is end-to-end encrypted with Noise, the same cryptography as WireGuard.
Servers and routers
One static binary for Ubuntu, Debian, CentOS and other systemd hosts, and for OpenWrt / iStoreOS routers. Installed with one command.
Monitoring and alerts
CPU, memory, disks, network, systemd units, Docker containers and WireGuard peers, with alerts by e-mail.
Per-machine permissions
Each agent decides for itself whether it only reports metrics, runs a fixed list of actions, or allows anything.
Signed agent updates
Roll out new agent versions from the admin page. Agents only install builds signed with your offline release key.
