Always getting better.

A new Tenvara starts with the service desk. Settings > Modules shows what every other module gives you, what it needs and which ones most teams switch on next, and turning one on sets up what it needs and walks you through its steps. Switch one off and its work stops while its data stays.

Tenvara finds your customers' RDS deployments and, once adopted, shows every collection, session host, licence, certificate and user profile, who is on which host and how good their connection is, with drain, log off, shadow and restarts behind your approvals. People can log off a stuck session or reset their profile themselves in the portal.

Build each new desktop image patched and with its apps, test it on an isolated host that signs a test user in and starts the apps, send it for sign-off, then roll it out a few hosts at a time with one-click roll back.

Every server running Docker or Podman shows its Compose projects and containers, says which have newer images, updates them with roll back if the health check fails, alerts when something that should run stops, and backs up whole projects with their databases to restore on any host.

Reach a NAS, printer, switch or firewall's own web interface through the agent on its network, with no VPN, every session audited and closed on its own. Forward a port for SSH or a database tool the same way.

Every alert and detection passes one set of checks first: Tenvara recognises its own work, planned shutdowns and routine vendor activity, gathers one cause into one alert and one ticket, and asks how each one ended, so alert types that turn out to be noise for a customer step down by themselves.

Findings carry the operating system vendor's own rating and fix state, are prioritised by whether a fix exists and whether attackers use it, and are grouped into one task per update, so installing one kernel and rebooting can clear hundreds at once.

Before resetting a password or MFA, check the caller with a code to the details on file, a callback, their manager's approval, a prompt in the portal or a number to pick on their own Windows computer, with a policy for each customer and every check recorded.

Decide for each queue whether nights belong to nobody, your own on-call rota or an out-of-hours provider. Held alerts wait with SLA clocks stopped, providers get urgent work by email, forwarded ticket or webhook and hand it back with a summary, and the morning shows what came in.

See each enterprise app across your customers' Microsoft 365 tenants with its permissions, owners and secrets, clean out unused and risky apps after approval, keep an approved list, and get an alert when a known-bad app appears. One approval switches an app off in every tenant at once.

Each policy in plain words with who it covers and leaves out, its real effect from sign-ins, What if for any person, and its history with who changed what.

Your own mailbox logged on contact and deal timelines, a day list of every sales task, scored and auto-assigned leads, sequences that stop when someone replies, marketing lists that respect consent, and account plans with suggested opportunities from what Tenvara already knows.

Give each customer an address for vendor sign-ups. Codes, renewals and invoices land on the customer rather than in the service desk, with codes revealed like passwords and every view logged.

Names you give stick, devices that update themselves raise one clear alert with the fix, deleting a device removes its agent, and you can see who is signed in and whether they are there before you connect.

Tenvara plans each site's backups from their history so the upload stays inside the budget, says when one is waiting for bandwidth, and explains any failure in plain words with what to do next.

Press Ctrl+Alt+Del, answer an administrator prompt, switch between a server's sessions without reconnecting, and keep the picture readable on a slow link, in the browser or the desktop viewer with files and a terminal.

A full ITSM platform for organisations that run their own IT: incidents, service requests from a catalogue, problems, major incidents and changes with a change calendar, SLAs by priority, department or VIP, an employee portal with manager approvals, and purchasing with IT spend by department, alongside device management, backup and Microsoft 365 in the same app. See ITSM for in-house IT teams.

Restore a SQL Server database from a device's backups straight into the instance, as a new database checked with DBCC CHECKDB or over the original with a tail-log backup taken first. Turn on log backups and the helper backs up each database's log every 15 minutes, so you can restore to any point between the oldest image and the latest log backup, with breaks in the chain reported.

The desktop viewer checks your server for a newer version when it starts and at each session, offers Update now or Later (never during a session), checks the package's signature and installs it in place. Settings show which technicians run which version.

A vulnerability fix that fails twice, or installs but leaves the device still vulnerable, raises one alert per device naming each fix and why it failed, critical when the vulnerability is known to be exploited, with Try again and a default rule that makes it a ticket. Findings has a Failed fixes filter that raises tickets in one go.

Update hosts on a Proxmox cluster asks what happens to running guests: move them off live, or leave them where they are and shut them down cleanly only if the node reboots, starting exactly those again in their start order. Mark a guest Never move, see per node which guests would stop and for how long, and check for room before the run starts.

A device's Printers card lists the printers on it that Tenvara did not add and matches each one to your managed printers by address, print server share, Universal Print or model, with Take over, Remove, Manage or Ignore. Unmanaged queues gathers them across a site so its printers come under management in one go.

Each alert type has a Makes tickets switch, overall and per customer, that writes a visible alert rule, so the rules stay the one place that decides. Alert rules can pick every source alerts come from, and an alert's Raised by link opens the exact record it is about.

Each AI readiness assessment opens with a verdict on how close the customer is to Ready, and a one-page summary a director can act on. The plan puts root causes first, checks know which Microsoft licences the tenant has, Copilot readiness is checked person by person with a pilot group, and a new Identity and access section covers MFA, legacy sign-in and admin accounts.

Sixteen areas, each with its own sidebar and names that say what they hold, from Home and Service desk to Reports and Settings. Settings opens on a search over every page and setting, Cmd+K lists every page by its menu name, and on a phone a bottom bar keeps Home, Service desk, New, Search and the menu under your thumb.

A new module keeps every site's lines and phone services in one list with their supplier, contract dates and a status each. A probe at each site tells a fault on the LAN from a fault at the provider, outages are measured against the contracted SLA, and Raise a fault fills in the evidence for the supplier.

Call records come in by upload, email, from a server or as each call ends. A number plan types every number, rate cards and bundles price it, and each customer's month shows charge, cost and margin before the charges land on the invoice with an itemised call bill.

Record the lines, phone services, licences and maintenance you resell, with their terms, notice periods, cost and sell price. Tenvara works out the notice deadline and the renewal, bills them on the customer's contract, and when a supplier puts the price up you pass it on in one step.

Every alert opens with the exact record that raised it, whether it is still true and its key facts, and the email, push and chat card say the same. Where the fix can be done from the alert, it is offered with a preview and approval: update the app, install the patch, restart the service or retry the backup.

One list of every kind of alert, with its severity and how often it fires. Turn a type or a whole group off or on, overall or for one customer, until a date and with a reason, and the business review shows what is off.

Taking on a customer from another provider? In takeover mode agents enrol and report while patching, software changes, automation and backups hold until you say go, with a preview of what will start. Every new customer begins in onboarding mode, which turns the first week into one findings report.

Ask a customer's director, owner or data protection officer to read and sign a decision in the portal: a declined recommendation, an AI tool, an MFA exemption or devices kept past end of support. They sign or decline with a reason, and a PDF certificate goes into their documents.

Send a customer's contact the questions you need answered, from number porting to a new starter, and they fill them in a page at a time in the portal with drafts saved as they go. Passwords and porting codes go straight into your vault, reminders chase for you, and project tasks can wait for the answers.

Windows 7, Windows 8.1 and Windows Server 2008 R2 to 2012 R2 join the same device list, with inventory, vulnerabilities, monitoring, a terminal, scripts, power actions and a remote screen in the browser. They count as a risk in reports, so the replacement conversation starts itself.

Group servers that do the same job and they are never down together. Members patch in turn, their partners must be healthy first, cluster nodes are drained and resumed, and one alert per set follows how much service is left.

The agent collects every encrypted volume's recovery key into the credentials vault, however BitLocker was turned on, and keeps a replaced key marked as superseded. Devices with no key held are listed in one place, and every reveal is audited.

Turn a business review, an AI readiness assessment or a new customer's onboarding findings into a deck for the board, with the figures frozen as they were. Edit the slides and notes, present with a presenter view, download a PDF or an editable PowerPoint file, and publish the approved deck to the customer's portal.

A million-file OneDrive or a very large mailbox backs up within a fixed, small amount of memory. A backup interrupted by a restart or an update carries on from its checkpoint, and new Microsoft 365 tenants take their first backup from a queue you put in order.

The same Tenvara for an in-house IT team: one organisation with sites, departments and employees, requests approved by the department's manager and then IT, an employee portal for help and requests, and purchasing with IT spend by department.

Every device gets its real age, worked out from purchase, warranty and manufacture dates, and a verdict with reasons: Replace now, Plan for replacement or Fine. The verdicts and each device's book value sit in a report and in the business review.

Workstations switched off at night no longer raise alerts, and sleeping laptops show Asleep.

Tenvara has an MCP server. AI assistants that support MCP can work in Tenvara as the person who connected them, with that person's permissions, read only unless they allow more, and every call audited.

Setting up Tenvara now has a guide. A short interview builds your plan, each step recommends settings with the reasons and can be undone for seven days, and a go-live check tells you when you are ready. Moving from HaloPSA, ConnectWise, Autotask or Syncro starts from their CSV exports.

Show each customer how ready they are to use AI safely: files shared too widely, sensitive data in the wrong places, AI tools nobody approved and Copilot licences, scored with fixes that go through their approver and can be undone.

424 settings for Windows, servers, domain controllers, macOS and Linux, explained in plain words. Audit first, enforce in rings with approvals, roll back in one click, push a baseline to Intune, and get a drift alert that says who changed what.

Run ISO 27001, ISO 9001, UK GDPR and Cyber Essentials for your customers: one control library, policy documents under control, a risk register and Statement of Applicability, evidence that collects itself, internal audits, and auditor access with signed evidence packs.

One search across every backup you hold, with versions, deleted items and a time slider.

Two big additions for the work you sell and deliver.

Users on Windows can record their screen from the tray. The ticket arrives with a player and every step they took, never what they typed, and you decide who may watch and how long recordings are kept.

The portal was rebuilt around what customers come to do.

One approvals engine for everything that needs a yes.

More of the infrastructure you run, and better ways to show the work.

New ways to find and fix risk across your customers, from their software to their staff to their tenants.

Backups that are hard to destroy and proven to come back.

More of the jobs RMM tools do, on the same agent.

Every setting in one searchable catalogue, with the option to do things differently for one customer or one contract.

Put your own brand on everything your customers see, all the way to the tray icon on their computers.

Order, receive and track the hardware you sell, from the accepted quote to the serial number on the customer's device.

The service desk grew up: customers ask for what they need from a catalogue in their portal, and your team handles problems, major incidents and changes properly.

Tenvara now works the way MSPs outside the UK do: in their language, their currency and their tax rules, with their own public holidays in the SLA clock.

Invoice runs gather contracts, licences, ticket and project time, milestones, expenses and quotes into invoices you review and send, in any currency with the right tax for each country.

Plan onboardings, migrations, server replacements and office moves in Tenvara, with phases, tasks and dependencies on a timeline you can drag, and bill them through the same contracts and invoices as everything else.

Security monitoring comes to Tenvara: security events from devices, Microsoft 365 and network devices in one searchable place, with built-in detections and a view of every device's protection.

Reporting for running your business and for showing customers the value you deliver.

A big release: live chat with your customers, an automation engine, scheduling and dispatch, and optional AI assist that runs on your own Anthropic API key.

The day-to-day operations toolkit: keep devices patched, deploy software, run scripts, push printers and manage Proxmox hosts and web servers. Every command sent to a device is signed and checked by the agent before it runs.

Manage your customers' Microsoft 365 tenants, check their security posture and keep licences and billing in step, all from one connection.

Tenvara Backup protects Microsoft 365 and your customers' devices from the same place you manage them, controlled through the Tenvara agent.

Monitoring is built into the Tenvara agent, with policies, checks and alerts that feed straight into your tickets.

Everything you know about a customer, in one place, linked to the things it describes.

Build quotes, send branded proposals and let customers sign online, with accepted work flowing straight into contracts and tickets.

Tenvara's built-in PSA: a fast ticket inbox with email in and out, SLAs, time, contracts, and a portal for your customers.

Sign-in now works the way your team does: local accounts out of the box, with single sign-on from your identity provider when you want it.

The Tenvara agent arrives on Windows, macOS and Linux, and with it Remote access straight from the device page.

One web app for your whole team, with your customers, sites, contacts, devices and alerts in one place.