⚡
Pull-based agents
Agents pull jobs from the Hub — no inbound ports required on managed hosts. Works across NAT, VPNs, and firewalls.
🔒
Fully on-premises
Your Hub, your PostgreSQL, your Redis. No data leaves your network. Runs entirely within your infrastructure.
📦
Ubuntu Pro aware
Tracks ESM patches, livepatch status, and Ubuntu Pro subscription state across every host in your fleet.
🔍
CVE visibility
Syncs the full Ubuntu USN database every 6 hours. See which CVEs affect which hosts before you patch.
🐳
Docker snapshot
Every heartbeat captures running containers per host. See your fleet's Docker state from a single dashboard.
📡
Live log streaming
Watch patch jobs execute in real time via Server-Sent Events. Every apt line streamed to the Hub as it runs.