// Products

Enterprise IT tools built from real problems

Eight products shaped by two decades of managing infrastructure at the world's most demanding organisations. Each one solves a problem we've lived through — patching air-gapped networks, taming privilege sprawl, making sense of 50,000 endpoints. No feature bloat. No enterprise sales theatre. Just tools that work.

Observe & Understand
Horizon
Monitoring
Complete real-time visibility across your entire infrastructure.
Horizon gives you a single pane of glass for servers, services, network, and cloud — without the complexity of enterprise monitoring stacks. Lightweight agents, smart alerting, and dashboards that surface what matters. Built for teams that need to see everything without hiring a monitoring team.
Real-time dashboardsSmart alertingMulti-cloudLightweight agentsAPI-first
Instead of: Datadog's pricing, Zabbix's complexity, or PRTG's licensing model
Pulse
DEX
Real-time endpoint intelligence and digital employee experience.
Pulse sits on every endpoint and tells you what your users actually experience — app performance, login times, crash frequency, network quality. Not what your monitoring thinks is happening, but what the person at the keyboard is going through. Think Nexthink, without the Nexthink price tag.
Endpoint telemetryDEX scoringProactive remediationUser sentimentLightweight agent
Instead of: Nexthink, Lakeside SysTrack, or ControlUp at a fraction of the cost
Manage & Optimise
Forge
AI-Powered
AI ticket enrichment that makes every ticket actionable before a human touches it.
Forge is a self-hosted AI layer that plugs into your existing ITSM. It classifies, prioritises, enriches, and routes tickets using your own data — no cloud dependency, no data leaving your environment. Your L1 team gets pre-analysed tickets with suggested resolutions. Your SLA metrics improve overnight.
Self-hostedITSM agnosticAuto-classificationResolution suggestionsYour data stays yours
Instead of: Expensive AI add-ons from ServiceNow or Jira, or building your own from scratch
Optima
Licensing
License compliance and cost control without the spreadsheet hell.
Optima tracks every software license across your estate — what you own, what you use, what you're wasting money on. It flags compliance risks before auditors find them and identifies savings you didn't know existed. One dashboard instead of forty spreadsheets.
Usage trackingCompliance alertsCost optimisationAudit-ready reportsMulti-vendor
Instead of: Snow License Manager, Flexera, or the dreaded audit-panic spreadsheet
Secure & Govern
Bastion
Open Source
Air-gapped patch management that the big vendors forgot.
Bastion is a secure, open-source WSUS alternative built for environments that can't phone home — isolated networks, classified systems, factory floors, ships. It manages Windows patching without requiring internet connectivity, with a control plane simple enough for a two-person IT team to operate.
Air-gappedOpen sourceWSUS replacementOffline syncSmall footprint
Instead of: WSUS (deprecated), Automox (cloud-only), ManageEngine, or PDQ (Windows-only management)
Keystone
Security
Modern endpoint privilege management — without the enterprise price tag.
Keystone enforces least-privilege on every endpoint using OS-native agents (eBPF on Linux, ETW on Windows) and an OPA policy engine. No kernel drivers, no agent bloat, no six-figure license. Define policies in plain language, deploy in hours, get audit trails that compliance teams actually understand.
eBPF / ETW agentsOPA policy engineJust-in-time elevationAudit trailsSelf-hosted
Instead of: CyberArk EPM, BeyondTrust, or Delinea — at 10% of the cost
Deploy & Deliver
Nova
Imaging
Deploy Windows in minutes — zero media, zero USB sticks, zero complexity.
Nova is a cloud-native Windows imaging platform that eliminates the need for WDS, MDT, gold images, and boot media. Define your build as code, push it to bare metal or VMs, and have a fully configured Windows environment running in minutes. Imaging for the modern era.
Zero-touchBuild-as-codeNo boot mediaCloud-nativeDriver injection
Instead of: MDT/WDS (end of life), SCCM OSD complexity, or manual imaging workflows
Propel
App Lifecycle
Enterprise application deployment and lifecycle management, simplified.
Propel handles the full lifecycle of your application estate — packaging, testing, deployment, updates, and retirement. It integrates with Intune, SCCM, and standalone environments. One tool to push apps to 10 machines or 10,000, with rollback, compliance checks, and reporting built in.
App packagingIntune / SCCMAuto-updatesRollbackCompliance reporting
Instead of: Patch My PC (limited scope), Flexera AdminStudio, or manual packaging workflows