Patches the OS and the apps
Operating system updates now, on a schedule or every week in a window you set, and app updates for only the devices that are behind.
Naxirion
Manage
Endpoint Management
Every device patched, and a click away.
Keeps your Windows and Linux devices patched, flags the ones that need attention, and puts a remote terminal, file browser and desktop for them in your browser.
The agent runs on:
- Windows 10 and 11
- Ubuntu
- Debian
- Not yet macOS
Naxirion Manage with an example account. Kestrel Freight and its devices are made up.
What it does
Manage at a glance
Remote support built in
The desktop, a terminal or the files of a Windows or Linux device, from your browser, with no separate remote access tool.
Flags what needs attention
Low disk space, devices that stopped checking in, overdue restarts and failing batteries, on every device and in the list.
Ranks vulnerabilities
Each one with its severity, FIRST's estimate of how likely it is to be exploited, and whether CISA lists it as exploited.
Inside the product
Patch, support and check every device from one console
One agent on each Windows and Linux device, one console in the browser. What you see about a device is what you can act on, from the same page.
Devices
Everything about a device, on one page
Each device says how it's doing before you ask. Low disk space, a device that has stopped checking in, a restart that's overdue and a battery that needs replacing are flagged in the list and on the device itself.
- Connect, run a script, install software, update the OS or restart, from the top of the page
- Pending Windows and Linux updates, with the security ones marked
- Installed software, local accounts, certificates and the agent version
- Search and filter the whole list, then export it to CSV
Remote support
Help someone without a site visit
Open the desktop, a terminal or the files of a Windows or Linux device from your browser. It is built into the agent, so there is no separate remote access tool to buy, install or keep patched.
- The desktop, with clipboard, Ctrl+Alt+Del and a choice of monitor
- A PowerShell or command prompt on Windows, a root shell on Linux
- Browse, upload and download files up to 1 GB
- Every session and file action is in the activity log, and terminal sessions are recorded
Patching
See which devices are behind, and bring them up to date
Patching lists every app in your library beside the vendor's latest version, how many devices are behind and which vulnerabilities the update fixes. Update the library, then update only the devices that need it.
- A catalog of common Windows and Linux apps, or your own MSI or deb package
- Install on one device or many at once, and uninstall from any of them
- Apps found on your devices that aren't in the library yet, including Windows apps winget knows
- Every install and update recorded in the activity log
OS updates
Operating system updates in a window you choose
Update the operating system on one device or a hundred, now or at a set time. Or turn on automatic updates for an organization and they run every week in its window. Nothing restarts unless you've said it can.
- Weekdays, a time and a time zone for each organization
- Leave out the devices that must never be interrupted
- Windows Update on Windows, apt, dnf or yum on Linux
- Scheduled updates are listed, and can be cancelled before they run
Vulnerabilities
Know which devices an attacker would pick first
Every vulnerability on your devices comes with its severity, FIRST's estimate of how likely it is to be exploited, and whether CISA lists it as being used by attackers. Filter to the exploited ones and start there.
- Windows, from Microsoft's own security updates, and Microsoft Office
- Ubuntu and Red Hat packages
- Each CVE links to the devices and software it affects
- Webhooks tell your other tools when a new one appears
For MSPs
All your clients, one console
Run every client from one place. Each one is its own organization, with its own devices, people and settings, and nothing crosses between them. Your staff switch from one client to the next without signing in again.
- Add a client organization in a few clicks, with its own install command
- Each client's plan, and its devices against the plan's limit
- Your staff as admins or technicians across every client
- Your logo, colors and product name, previewed before you save
Access
Root on every device, and a name on every action
A remote management tool can do anything on the devices it runs on, so who can use it, and what they did, is never left to guesswork.
Roles for each organization
Admins, technicians and read-only users, for one organization or all of them.
Every action logged
Remote sessions, file transfers, scripts, installs and updates, with who did it and when. A session that cannot be logged does not open.
Signed agent updates
Agents install from a signed package with one command, then update themselves from a signed repository.
Two-factor sign-in
An authenticator app for each user, or single sign-on through your identity provider with SAML.
Works with
Fits the tools you already use
Checks run on every device and report pass or fail. When one fails, or a new vulnerability turns up, Manage can open a ticket or call a webhook, so the work lands in your queue rather than waiting in a console.
- Webhooks for failing checks
- Webhooks for new vulnerabilities
- Webhooks when devices stop checking in
- Jira tickets
- Zendesk tickets
- An activity feed webhook
- SAML single sign-on
- A REST API
- CSV export of devices
What it doesn't do
Better you hear it from us
Manage Macs or phones
The agent runs on Windows 10 and 11 and on Linux. There is no macOS agent and no mobile device management.
Email you about a full disk
Health shows on every device and in the list, but there are no threshold alerts by email yet. Webhooks cover failing checks and offline devices.
Share a Wayland desktop
Remote desktop works on Windows and on Linux desktops running X11. The terminal and files work on every Linux device.
Stop an attack
Manage keeps devices patched and in reach. It isn't antivirus or EDR: for that, add Nexidium Shield.
Or in a bundle
Essentials
Know what you have, keep it patched, and stop threats on every endpoint.
Compare bundlesFor MSPs
Sell it under your brand
Partners can white-label Naxirion Manage and offer it to clients under their own name.
Partner programPairs well with
Build out your coverage
See Naxirion Manage in action.
Book a demo and we'll walk you through it and show how it fits with the rest of your security stack.