Unit 01 — Endpoint Management
Relay records a machine's state, makes the change, checks the state again and rolls back if anything drifted. Someone gets involved only when there's a decision to make, and nobody clicks approve seventeen times. Patching, monitoring, privileged access, discovery and security detection all work this way, on servers, workstations and the rugged devices on warehouse and shop floors.
The patch engine runs preflight checks, snapshots VMware guests and pre-downloads, then installs in stages through apt, dnf, yum or the Windows Update API. Afterwards it compares the machine with its preflight state and rolls back if something's wrong. Maintenance windows, recurring schedules and ring-based rollout are built in. The 30 to 60 minutes of checking per server that started this company is now the software's job.
Alerts and incidents share one model, so triage happens once. Monitoring includes alert rules and templates, notification routing, a NOC dashboard, application and metric monitors, forecasting and dependency-aware suppression. Security covers vulnerability management with exploit data and per-endpoint exploitability, drift detection against a known-good fingerprint catalog, ransomware detection, scored exfiltration detection, and certificate lifecycle management with auto-renewal.
PAM is zero-knowledge. Credentials sit in a vault under envelope encryption, sessions are brokered and vault access is audited, so nobody needs to know the credential, the operator included. Remote desktop, terminal and file browser sessions run through the agent tunnel and are recorded. Actions one person shouldn't take alone need approval.
Discovery crawls SNMP topology over LLDP, CDP and routing protocols to map the infrastructure, alongside dynamic endpoint groups. The infrastructure bridge connects to hypervisor and cloud control planes. AD management covers forest inventory, stale-account policies, replication health, GPO baseline drift and AD backup. Workflow automation, runbooks, scripts and a marketplace are included.
The Relay beta is a long trial, because patching, monitoring and privileged access take months to judge. Trials include Portal for sign-in, and you can connect Beacon when the service desk comes into scope.