Change anything. Know exactly what it will do.
See every device a change reaches before you save it. Ask why a device did not get it. See what changed, and when. Undo it everywhere.
Every save shows the devices it reaches, and what could go wrong, before it is sent.
Why? traces any outcome on any device to the one step that broke.
Every device, as it was on any day. Every change, with who made it.
One click puts every device back where it was.
See the blast radius before you hit Save
Every profile, policy, rule and group edit opens a preview first: the devices that get it for the first time, get the new version, or lose it.
- Conflicts with what devices already have, judged by Apple's and Microsoft's own schemas
- What people will notice, counted in people, and what they will see on screen
- A warning when a change could cut devices off from Xavier
- Above your threshold, you type the device count to save
Rollouts that stop themselves
Send a change to your IT team first, then 5% of devices, then 25%, then everyone. Each ring waits until the one before has it.
- Pauses on its own when the devices that got it stop checking in, fail the change or fall out of compliance more than the rest
- A fleet-wide outage pauses nothing. A change that could cut devices off pauses on the first device that goes quiet.
- An alert in the console, by email, in Slack, Teams or Google Chat, or to a webhook
- Roll back in one click: every device returns to the version it had
Ask why. Get one sentence, not a log.
Next to every command, profile, policy, script and compliance result: a trace from scope to applied, stopping at the step that broke, with the action that fixes it.
- Apple, Windows and Android error codes translated into plain words, from the vendors' own documentation
- Why a device is in scope at all: the group, the rule and the device's own value
- Watch a command live, step by step, while it runs
- For a whole fleet, the devices that did not get a change, grouped by the step that broke
Every device, as it was on any day
Pick a date to see a device as it was then. Compare two dates to see exactly what changed in between, and what caused it.
- Fleet changes in plain lines: "212 Macs updated to macOS 26.1", "Zoom removed from 14 devices"
- Which groups a device was in, and which configuration applied to it, on any date
- Only real changes are kept. Battery, free disk and check-in noise never are.
- Kept for as long as your audit evidence is
Undo a change on every device it reached
Not just the old settings sent again: each device is put back where it was before the change, including profiles the change removed.
- What undo cannot take back is named before you push, and again before you undo
- Windows settings that Windows keeps after removal are written back to their old values
- Every undo is a change of its own, so it can be undone too
A terminal on any Mac, PC or Linux machine. Every keystroke on the record.
Open a shell on a managed Mac, Windows PC or Linux machine from the console, as root or as the signed-in user. Nobody has to share their screen.
- No session opens without a reason
- Everything typed and shown is recorded to storage you own, kept for a year, and cannot be deleted
- Replay any session, or download it for your auditors
- Off until you switch it on, for the devices you choose
One click. Everything your auditor asks for.
One report shows every device, its security checks, the devices you removed and what happened to them, and who changed your security settings. Every check is mapped to the controls your auditor tests.
- A summary PDF, an Excel workbook and a CSV, with a SHA-256 hash anyone can verify
- Mapped to SOC 2, ISO 27001, CIS, NIST 800-53, HIPAA, PCI DSS and Cyber Essentials
- How devices are now, how they were on any past date, or across your whole audit window
- Give your auditor a read-only seat and they can generate it themselves
Try it on a fleet that is already there.
The live demo has all of it: previews, rollouts, Why? and history, on 150 sample devices.