Admin console preview
See the surface before you buy.
This is a sample data preview — no live tenant data is shown. The same surface is what your tenant gets post-purchase, with your fleet, your policies, and your SIEM destinations.
Two lenses on the same telemetry
Personal + admin, same data plane.
Every device runs the same Pro client. Enterprise tenants get an admin console on top of the same flow records — no second agent, no schema fork.
Choose your shape
Same console. Three trust boundaries.
The admin console preview above is identical across all deployment shapes. What changes is where your audit data lives and how SIEM events flow.
All tiers run the same bit-identical client binary · Licences come from the server, not the client.
Live preview
The admin console your fleet gets.
Sample data only. Your tenant sees this surface with your devices, your policies, and your SIEM destinations.
| Signal | |||
|---|---|---|---|
| 2026-04-28 09:42 | workstation-001 | Unrecognised TLS SNI to 185.220.x | Medium |
| 2026-04-28 09:31 | mbp-eng-23 | Outbound to known C2 list | High |
| 2026-04-28 09:18 | pos-store-12 | Long-lived TCP to non-payment endpoint | Medium |
| 2026-04-28 08:55 | devbox-01 | AWS access-key shape in HTTP body | Critical |
Platform capabilities
What the console gives you.
Policy engine
Signed egress rules distributed to every managed device. Allow / block per app, per destination CIDR, per port, or set a bytes-out threshold before flagging.
Audit log
Immutable audit trail: 90 days on Cloud, 7 years on Hybrid, custom retention on Private. Exportable as OCSF JSON for your SIEM or compliance auditor.
SCIM provisioning
Automated seat provisioning and de-provisioning from Okta, Azure AD, Google Workspace, or any SCIM 2.0-compliant IdP. Off-board a user; the device licence revokes automatically.
BYOK encryption
Customer-managed encryption keys for audit data at rest. Supply your AWS KMS, Azure Key Vault, or GCP KMS ARN — we never hold the key.
Intelligence layer
Anomaly detection. Built-in.
Smart alerts fire when outbound bytes deviate from a device's 7-day EWMA baseline. Per-tenant threshold tuning via policy — no rules to write for the common case.
- — Flags the app, new destinations, and excess byte volume
- — OCSF-formatted anomaly events forwarded to your SIEM automatically
- — Fleet-wide thresholds pushed via policy engine
FAQ
Questions about the demo
- No. Every row in this preview — hostnames, users, policies, events — is sample data generated for illustration purposes. No live tenant data is ever shown on this page. The admin console your tenant receives post-purchase is the same surface, populated with your actual fleet, your policies, and your SIEM destinations.
Enterprise questions? Email enterprise sales or request DPA / MSA templates.
Want this for your fleet?
Enterprise Cloud rolls out in hours. SSO, SIEM, policy engine, MDM-ready installers — same surface as this preview, with your tenant, your IdP, and your data.
Three deployment shapes. One client. One licence model.
Standard DPA + MSA available · Response within 1 business day