RMM and remote access
One agent. Every device. Everything you need to fix it.
A single signed agent for Windows, macOS and Linux handles inventory, monitoring, patching, software, scripts and remote control. One installer, one service and one enrolment, with features switched on by policy and updates rolled out in rings.
One agent, updated safely
Signed builds for Windows, macOS and Linux. New versions go to a pilot ring first, soak, and halt on any failure.
Remote in from anywhere
Control, file transfer, recording and a Toolbox of background tools, from the device, the ticket or the alert.
Patching with policies
Windows, macOS and Linux updates by policy, with approvals, maintenance windows and server sets that keep pairs and clusters up.
Alerts only when it matters
Your own work and planned shutdowns are recognised, one cause is one alert, and every alert says what raised it and offers the fix.
A device list built for triage
Filter by customer, site, status, operating system or disk space, and save the views you use. Health, last seen, patch state and backup status are columns, not clicks.
- Saved views, columns you choose and bulk actions
- Sleeping laptops show Asleep, not offline
- A Policies tab that shows where every setting comes from
- Protect, back up now or pause backup from any list
Patch management for Windows, macOS and Linux
Windows Update with approve and defer, macOS software updates, apt, dnf and yum on Linux, and third-party app updates through the software catalogue. Policies decide what installs when, and compliance views show what is behind.
- Auto-approve rules, deferrals and customer approval
- Windows by week of the month, or Patch Tuesday plus a number of days
- Scripts before and after, and uninstall an update
- Cancel a patch job that is queued or running
Patch pairs and clusters without downtime
Servers that do the same job go into a server set, so they are never down together. Members take turns or follow a fixed order, with the domain controller that holds the FSMO roles last. Before a member installs or restarts, its partners must be online and healthy, cluster nodes are drained first and resumed after, and patching holds while a set is degraded.
- Sets suggested for domain controllers and failover clusters
- One alert per set, at a level that follows how much service is left
- Each member's next turn, and a calendar that flags clashes
Software deployment and drift
Deploy to a device, a selection or a policy. winget on Windows, Homebrew casks and pkg on macOS, plus installers you upload. Required and optional installs, uninstall and version pinning.
- Live winget and Homebrew search, and bundles
- Uninstall any app and alert on unwanted software
- Waits politely when the app is in use
Remote control without another tool
Sessions start from the device, the ticket or the alert, in the browser or the desktop viewer, whichever each technician prefers, and you see who is signed in and whether they are there before you connect. Press Ctrl+Alt+Del, answer an administrator prompt, or move between a server's sessions without reconnecting, and the picture stays readable on a slow link and sharpens when the screen is still. Move files both ways, open a terminal, services, event logs or the registry without disturbing the user, and record sessions to play back later.
- A desktop viewer for Windows and Linux that keeps itself up to date, or the browser
- Remote Desktop users' own sessions, disconnected ones too
- Manager and customer approval for sensitive devices
- Sessions on the ticket with notes and time
- Registry editor, power actions and Wake-on-LAN
Open a device's web page from anywhere
Open web page reaches the web interface of a NAS, printer, switch, firewall or UPS through an agent on its network, with no VPN and nothing installed on the device. Sign-ins, live panels, uploads and downloads work as they would on site, sessions end on their own and every one is in the audit log. Forward a port the same way for SSH, remote desktop to a machine without the agent, or a SQL client.
- Its own permission: Open device web pages
- Private addresses on the agent's own networks, unless an administrator adds others
- Everyone's open sessions in one list, with Close
Devices that stay tidy
The name you give a device sticks, with the computer's own hostname beside it, and Rename the computer too renames the machine itself after an approval. Say for a device, a group or a policy whether Tenvara, the device itself or nobody keeps it up to date: one that updates itself raises a single clear alert with the cause and the repair when its own updating fails, and one nobody can patch becomes an accepted risk with a review date. Delete a device and its agent uninstalls itself, straight away or when it next checks in.
- Last user and session columns, with idle and locked shown
- QR labels and asset tags that are unique within each customer
- Pending uninstalls you can follow and cancel
Windows on their screen, in your colours
The remote support request, restart and update reminders, administrator rights windows and messages the agent shows people all share one design with your logo, your colours, the technician's name and photo and your own words. Set them once for every computer, override them for a customer, a site or a device group, check the live preview in light and dark, and send a test to a device before anyone sees it.
- Silent, off or quiet hours for each kind of window
- Decline as the default on remote support requests
- Where each option came from, shown beside it
Older Windows is still managed
The Lite agent covers Windows 7, Windows 8.1 and Windows Server 2008 R2, 2012 and 2012 R2, with signed installers for 64-bit and 32-bit that update themselves through the same rollouts. Those machines get inventory with hotfixes, vulnerabilities, monitoring, a terminal, files, scripts, power actions and a remote screen in the browser. They count as a risk in reports and the health score, so the replacement conversation starts itself.
- Windows 7 to Server 2012 R2, in the same device list
- A remote screen with Ctrl+Alt+Del at the sign-in screen
- BitLocker recovery keys collected here too
Know when to replace it
Every device gets its real age, worked out from purchase and warranty dates, BIOS and manufacture dates and the processor's launch year, and a verdict: Replace now, Plan for replacement by a given month, or Fine, with the reasons. Disk wear, blue screens and unexpected shutdowns count too. The verdicts sit on the customer's Lifecycle tab, in the Hardware refresh report and in the business review, with each device's book value beside them.
- Rules you can tune, overall or per customer
- Purchase cost written down to a book value
- Exports and a section in the business review
Network devices and phones in the same list
A probe on a site's server discovers the network, draws its map and polls switches, firewalls, access points, printers and UPS over SNMP v2c and v3, with traps. Phones and tablets sit beside your computers: Apple and Android through your own Apple Business Manager and Android Enterprise accounts, and Intune phones from your customers' tenants.
- Network discovery and topology maps
- SNMP with editable vendor templates
- Mobile device management with compliance and lost mode
Monitoring and one alert list
Checks and metrics from the agent, thresholds you set, and every alert from every part of the platform in one list. Every alert and detection passes the same checks first: Tenvara recognises its own work, planned shutdowns and routine vendor activity, waits out a blip, and gathers one cause into one alert and one ticket. Every close asks how it ended, and an alert type that turns out to be mostly noise for a customer steps down by itself, with one-click Undo.
- Snooze, owner, notes and alert history with MTTA and MTTR
- Noise figures for the last 30 days on every alert type
- Alerts that reopen instead of repeating
- Alert types off for one customer, until a date, with a reason
Every alert says what raised it, and offers the fix
Each alert opens with Raised by: the exact record as a link, whether it is still true and its key facts. The email, the desktop notification, the Teams or Slack card and the on-call page say the same. Where the fix can be done from the alert, it is offered with a preview of what will happen and on which device: update the app, install the patch, restart the service, clear the disk, retry the backup. You choose per alert type and per customer whether a fix is offered, suggested or run in the maintenance window.
- A preview, and approval where the fix asks for it
- Every step in the alert's activity
- Your runbook linked where the job needs a person
In the Tenvara app
Remote in from your phone
The Tenvara app puts every device in your pocket. Deal with an alert, run a script or take control of the screen from wherever you are.
- Acknowledge, resolve or raise a ticket from an alert
- Run scripts, patch now and restart
- Remote control with touch or trackpad and a key row
In the knowledge base
See exactly how it works
Tenvara is coming soon.
We're inviting MSPs to the beta in small groups. Apply to join, or get launch updates by email and hear first when pricing is announced.