Platform / Endpoint management & RMM (UEM)
Endpoint management & RMM (UEM)
Unified endpoint management that never asks you to open a port. Nexus runs its own cross-platform agent (Windows and Linux) that phones home outbound-only, backed by an Ed25519 signed-job engine and a default-deny capability model — so remote work is authorized cryptographically, not trusted implicitly. Patch deployment is live end-to-end on real hardware today; remote scripting, remote control, and every major MDM/RMM you already run are folded into the same console instead of a separate pane of glass per vendor.
Outbound-only — no inbound rule required at the site
Illustrative preview — not live data.
What it does
- Native outbound-only agent for Windows and Linux — zero inbound firewall rules at any client site
- Ed25519 signed remote jobs with a default-deny capability registry — nothing runs on a device unless it’s cryptographically authorized
- Patch deployment with persisted deployment rings, maintenance windows, and auto-halt (live end-to-end on real hardware)
- Governed endpoint operations — inspect and control services, query and terminate processes, look up logged-in sessions, export diagnostics, reboot or shut down with a bounded delay; every one of these was individually approved before it could be issued at all
- A ~500-script PowerShell library that imports as tenant-scoped unsigned drafts with immutable provenance — nothing becomes runnable on an endpoint just by being imported
- Remote scripting and embedded remote control (MeshCentral) launched straight from the device or a ticket
- One console over Jamf, Intune, NinjaOne, and Action1 — plus FortiGate, Omada, Meraki, and UniFi network monitoring
Other modules
Helpdesk & tickets
Email-to-ticket, SLA tracking, and device-linked history — the PSA your team lives in every day, with AI triage and drafting on top.
Asset & device management
Track every laptop, desktop, and mobile device through check-out, check-in, lifecycle, and warranty.
Microsoft 365 backup
Our own M365 backup — Exchange, OneDrive, and SharePoint into your own storage bucket, verified by hash, with per-item restore.
Run Endpoint management & RMM (UEM) yourself.
This module is live in our own MSP practice today. Join the design-partner cohort to run it in yours.