Skip to content
Tenvara is coming soon. Get early access

RMM and remote access

One agent. Every device. Everything you need to fix it.

A single signed agent for Windows, macOS and Linux handles inventory, monitoring, patching, software, scripts and remote control. One installer, one service and one enrolment, with features switched on by policy and updates rolled out in rings.

A device page showing health, patches, software and backup together

One agent, updated safely

Signed builds for Windows, macOS and Linux. New versions go to a pilot ring first, soak, and halt on any failure.

Remote in from anywhere

Control, file transfer, recording and a Toolbox of background tools, from the device, the ticket or the alert.

Patching with policies

Windows, macOS and Linux updates by policy, with approvals, maintenance windows and server sets that keep pairs and clusters up.

Alerts only when it matters

Your own work and planned shutdowns are recognised, one cause is one alert, and every alert says what raised it and offers the fix.

A device list built for triage

Filter by customer, site, status, operating system or disk space, and save the views you use. Health, last seen, patch state and backup status are columns, not clicks.

  • Saved views, columns you choose and bulk actions
  • Sleeping laptops show Asleep, not offline
  • A Policies tab that shows where every setting comes from
  • Protect, back up now or pause backup from any list
The device list with status, operating system and health columns

Patch management for Windows, macOS and Linux

Windows Update with approve and defer, macOS software updates, apt, dnf and yum on Linux, and third-party app updates through the software catalogue. Policies decide what installs when, and compliance views show what is behind.

  • Auto-approve rules, deferrals and customer approval
  • Windows by week of the month, or Patch Tuesday plus a number of days
  • Scripts before and after, and uninstall an update
  • Cancel a patch job that is queued or running
Patch compliance across customers

Patch pairs and clusters without downtime

Servers that do the same job go into a server set, so they are never down together. Members take turns or follow a fixed order, with the domain controller that holds the FSMO roles last. Before a member installs or restarts, its partners must be online and healthy, cluster nodes are drained first and resumed after, and patching holds while a set is degraded.

  • Sets suggested for domain controllers and failover clusters
  • One alert per set, at a level that follows how much service is left
  • Each member's next turn, and a calendar that flags clashes
Server sets with their members and each member's next turn to patch

Software deployment and drift

Deploy to a device, a selection or a policy. winget on Windows, Homebrew casks and pkg on macOS, plus installers you upload. Required and optional installs, uninstall and version pinning.

  • Live winget and Homebrew search, and bundles
  • Uninstall any app and alert on unwanted software
  • Waits politely when the app is in use
Software inventory drift across devices

Remote control without another tool

Sessions start from the device, the ticket or the alert, in the browser or the desktop viewer, whichever each technician prefers, and you see who is signed in and whether they are there before you connect. Press Ctrl+Alt+Del, answer an administrator prompt, or move between a server's sessions without reconnecting, and the picture stays readable on a slow link and sharpens when the screen is still. Move files both ways, open a terminal, services, event logs or the registry without disturbing the user, and record sessions to play back later.

  • A desktop viewer for Windows and Linux that keeps itself up to date, or the browser
  • Remote Desktop users' own sessions, disconnected ones too
  • Manager and customer approval for sensitive devices
  • Sessions on the ticket with notes and time
  • Registry editor, power actions and Wake-on-LAN
The remote sessions list with live and past sessions

Open a device's web page from anywhere

Open web page reaches the web interface of a NAS, printer, switch, firewall or UPS through an agent on its network, with no VPN and nothing installed on the device. Sign-ins, live panels, uploads and downloads work as they would on site, sessions end on their own and every one is in the audit log. Forward a port the same way for SSH, remote desktop to a machine without the agent, or a SQL client.

  • Its own permission: Open device web pages
  • Private addresses on the agent's own networks, unless an administrator adds others
  • Everyone's open sessions in one list, with Close

Devices that stay tidy

The name you give a device sticks, with the computer's own hostname beside it, and Rename the computer too renames the machine itself after an approval. Say for a device, a group or a policy whether Tenvara, the device itself or nobody keeps it up to date: one that updates itself raises a single clear alert with the cause and the repair when its own updating fails, and one nobody can patch becomes an accepted risk with a review date. Delete a device and its agent uninstalls itself, straight away or when it next checks in.

  • Last user and session columns, with idle and locked shown
  • QR labels and asset tags that are unique within each customer
  • Pending uninstalls you can follow and cancel

Windows on their screen, in your colours

The remote support request, restart and update reminders, administrator rights windows and messages the agent shows people all share one design with your logo, your colours, the technician's name and photo and your own words. Set them once for every computer, override them for a customer, a site or a device group, check the live preview in light and dark, and send a test to a device before anyone sees it.

  • Silent, off or quiet hours for each kind of window
  • Decline as the default on remote support requests
  • Where each option came from, shown beside it

Older Windows is still managed

The Lite agent covers Windows 7, Windows 8.1 and Windows Server 2008 R2, 2012 and 2012 R2, with signed installers for 64-bit and 32-bit that update themselves through the same rollouts. Those machines get inventory with hotfixes, vulnerabilities, monitoring, a terminal, files, scripts, power actions and a remote screen in the browser. They count as a risk in reports and the health score, so the replacement conversation starts itself.

  • Windows 7 to Server 2012 R2, in the same device list
  • A remote screen with Ctrl+Alt+Del at the sign-in screen
  • BitLocker recovery keys collected here too

Know when to replace it

Every device gets its real age, worked out from purchase and warranty dates, BIOS and manufacture dates and the processor's launch year, and a verdict: Replace now, Plan for replacement by a given month, or Fine, with the reasons. Disk wear, blue screens and unexpected shutdowns count too. The verdicts sit on the customer's Lifecycle tab, in the Hardware refresh report and in the business review, with each device's book value beside them.

  • Rules you can tune, overall or per customer
  • Purchase cost written down to a book value
  • Exports and a section in the business review
The hardware refresh report with each device's age, verdict and reasons

Network devices and phones in the same list

A probe on a site's server discovers the network, draws its map and polls switches, firewalls, access points, printers and UPS over SNMP v2c and v3, with traps. Phones and tablets sit beside your computers: Apple and Android through your own Apple Business Manager and Android Enterprise accounts, and Intune phones from your customers' tenants.

  • Network discovery and topology maps
  • SNMP with editable vendor templates
  • Mobile device management with compliance and lost mode
The network devices at one site, found and polled over SNMP

Monitoring and one alert list

Checks and metrics from the agent, thresholds you set, and every alert from every part of the platform in one list. Every alert and detection passes the same checks first: Tenvara recognises its own work, planned shutdowns and routine vendor activity, waits out a blip, and gathers one cause into one alert and one ticket. Every close asks how it ended, and an alert type that turns out to be mostly noise for a customer steps down by itself, with one-click Undo.

  • Snooze, owner, notes and alert history with MTTA and MTTR
  • Noise figures for the last 30 days on every alert type
  • Alerts that reopen instead of repeating
  • Alert types off for one customer, until a date, with a reason
Alert types by area, each with its severity and a switch to turn it off or on

Every alert says what raised it, and offers the fix

Each alert opens with Raised by: the exact record as a link, whether it is still true and its key facts. The email, the desktop notification, the Teams or Slack card and the on-call page say the same. Where the fix can be done from the alert, it is offered with a preview of what will happen and on which device: update the app, install the patch, restart the service, clear the disk, retry the backup. You choose per alert type and per customer whether a fix is offered, suggested or run in the maintenance window.

  • A preview, and approval where the fix asks for it
  • Every step in the alert's activity
  • Your runbook linked where the job needs a person
An alert showing the record that raised it and the fix on offer

In the Tenvara app

Remote in from your phone

The Tenvara app puts every device in your pocket. Deal with an alert, run a script or take control of the screen from wherever you are.

  • Acknowledge, resolve or raise a ticket from an alert
  • Run scripts, patch now and restart
  • Remote control with touch or trackpad and a key row
See the Tenvara app iPhone, iPad and Android, for beta customers
An alert in the Tenvara app
A live remote control session in the Tenvara app, with the key row and keyboard

In the knowledge base

See exactly how it works

Opening device web pages and forwarding ports Open the web page of a NAS, printer, switch, firewall or UPS from anywhere through an agent on its network, with no VPN and nothing installed on the device, and forward a port for SSH, remote desktop or a SQL client. Who can, what is allowed and how sessions end. Who updates a device: Tenvara, the device itself, or nobody Say who keeps each device up to date, so vulnerabilities alert only where someone can act. Devices that update themselves get one alert when their own updating fails, appliances nobody can patch become one accepted risk with a review date. Device names, hostnames and renaming the computer The difference between the name you give a device and the computer's own hostname, how both show up and are found, group rules on either, and renaming the machine itself through its agent with an approval. Who is signed in and whether they are there See who is signed in to each computer and whether they are active, idle, locked or on a disconnected Remote Desktop session, every session on a server, the Last user and Session columns, and what you see before a remote session starts. Switching sessions and Remote Desktop users Open the session of a user who is on Remote Desktop, pick a session when several people are signed in, move a live session to another user's desktop from the Sessions menu without reconnecting, and bring a disconnected session to the screen. Ctrl+Alt+Del in a remote session When the Ctrl+Alt+Del button works in a remote session, how the device page shows which Windows policy blocks it, how to allow it in Group Policy or from the device page through approval, and how to sign in when it stays blocked. The windows and notifications people see on their computers The consent, restart, update, administrator rights and message windows and the notifications the agent shows people at their computers, the options that shape them for everyone, a customer, a site or a device group, the live preview, and sending a test to a device. Print labels and unique asset tags Print QR labels for one device or many on A4 sheets or a label printer roll, what the code opens and why it holds nothing secret, and how asset tags stay unique within each customer. How Tenvara decides what reaches someone The checks every alert and detection passes before anyone is told: a short wait, your own work, planned states and maintenance, one cause one alert, learning periods, and what Critical means. How did it end? Closing alerts and the noise figures The five outcomes every close asks for, what reopens and what stays closed within 7 days, the 30-day noise figures on Alert types and security rules, automatic lowering with Undo, and the weekly noisiest five. Policies and where settings come from See every module's policy for a customer, site, device group or device in one Policies tab, understand which level wins, and compare customers in Settings > Policies. Supported systems The versions of Windows, macOS and Linux the agent runs on, which Windows versions use the Lite agent, which part of the agent runs where, and what happens on a machine that is too old. Older Windows and the Lite agent Windows 7 SP1, 8.1, Server 2008 R2 SP1, 2012 and 2012 R2 run the Lite agent. How to install it, what it reports, what you can do on those devices, what is not available and why, and the end-of-support warning. The desktop viewer Install the desktop viewer on Windows or Linux, open remote sessions in a window of their own with the whole keyboard, files, a terminal and the session's ticket work, set which server it trusts, and keep it up to date. The Toolbox, Terminal and your default viewer Choose where Remote in opens for you and for your team, open a terminal on any computer, and reach background tools, scripts and quick actions from the Toolbox. Server sets Keep servers that do one job, such as domain controllers or the nodes of a cluster, from patching or going down at the same time. Make a set from a template, a rule or a suggestion, see who goes when on the calendar, and read how serious an outage is by how much of the service is left. Hardware refresh verdicts and asset cost How Tenvara works out a device's real age, decides between Replace now, Plan for replacement and Fine, and writes a purchase cost down to a book value you can report on. What raised an alert, and fixing it from the alert Read Raised by on any alert to see the exact record behind it, run the fix its module offers with a preview first, and choose which alert types offer, suggest or run their fix by themselves. Alert types See every kind of alert Tenvara can raise with its noise over 30 days, turn a type or a whole group off or on, overall or for one customer, with an end date and a reason, undo an automatic lowering, and choose whether each type makes tickets. Quiet monitoring and onboarding findings How Tenvara stays quiet about normal things, handles offline devices, checks that only fit some machines and checks that could not run, and turns a new customer's first scans into one report. Agent updates and release channels How new agent releases reach your devices from the release feed, with stable and beta channels, a pilot ring and soak, halts, pins and maintenance windows. File transfer, recording and background tools Work on a device without taking over its screen: a terminal, files both ways, processes, services, event logs, the registry, scheduled tasks and installed software, plus recorded sessions you can play back. The tray app What the people at a managed computer get from the agent's tray icon: report a problem, my requests, your own menu entries, the App store, computer details, remote help and messages, and how to set it up. Device lifecycle, retire, replace and stale devices Put a device into maintenance mode, retire it with a disposal certificate, move a user's work to a replacement, merge duplicates, review stale devices, follow pending uninstalls and report uptime. Mobile device management Manage your customers' iPhones, iPads and Android phones from Tenvara with policies, apps, enrolment links and actions such as lock, lost mode and wipe, beside the phones Intune manages. Network discovery and topology Make an agent at each site the network probe, scan its subnets, see each machine joined up with everything Tenvara already knows, adopt or ignore what is new, and read the site's topology map. SNMP monitoring and traps Poll switches, firewalls, access points, UPS units, printers and other network kit over SNMP v2c or v3 through the site's probe, with editable vendor templates, alerts and trap rules. Domain and SSL monitoring Watch every customer domain's registration, expiry, name servers and mail servers, and check the certificates on their websites, webmail, gateways and VPN portals.

Tenvara is coming soon.

We're inviting MSPs to the beta in small groups. Apply to join, or get launch updates by email and hear first when pricing is announced.