Security
An RMM is the keys to every machine. So we built it like one.
Audited before it acts
Every action that reaches a machine is written to an add-only log first. If the log cannot be written, the action does not run.
Signed from end to end
Agents are code-signed, every install script refuses an unsigned file, and commands are signed by a key held in a hardware security module.
Nothing dangerous by default
Remote control, recordings, file transfer and secrets start at no access. Somebody has to grant them, and nobody can grant more than they hold.
Consent the user can see
Ask, ask and proceed, or not at all, per client. An on-screen indicator with an End button is always shown.
Agents that resist removal
Optional tamper protection: uninstalling needs a code, and the service cannot simply be stopped.
Scanned on every change
Gitleaks, Semgrep, OSV-Scanner and Trivy on every change, every night and every deploy.
Put it on 100 machines this afternoon. Decide in two weeks.
Ask us for a free trial on up to 100 devices with everything switched on, for one company or for the clients you manage. When it ends your data stays, and the console goes read-only until you subscribe at $4.50 per device per month. Or have it come with a managed agreement: we enable it for your organization and license the devices it covers.
Already a ClearPath client and ClearWatch isn't open to you? Get in touch.