amidaware/tacticalrmm
Tacticalrmm
TacticalRMM is a remote monitoring and management platform designed for overseeing endpoints and automating IT administration. It functions as an endpoint management tool and IT automation framework, providing a centralized dashboard for executing scripts, monitoring system health, and managing remote devices across multiple tenants.
The platform distinguishes itself through a comprehensive remote administration suite that includes real-time shell access, remote file management, and registry editing. It integrates with third-party remote desktop software and provides a hierarchical policy inheritance model, allowing settings to cascade from global levels down to individual agents.
Broad capabilities cover automated operating system patching, hardware and software asset inventory, and a robust monitoring system with exit-code-driven alerting. The system also includes identity integration via OpenID Connect for single sign-on, a template-based reporting engine for generating PDF and HTML documents, and a REST API for programmatic endpoint control.
The server can be deployed using container images and configured behind a reverse proxy for SSL termination.
Features
- Endpoint Management Tools - Serves as a comprehensive tool for deploying agents, auditing installed software, and managing hardware inventories.
- Remote Monitoring and Management Platforms - Functions as a full RMM platform for overseeing endpoints and automating IT administration.
- Remote Monitoring Dashboards - Provides a centralized dashboard for monitoring system health and managing endpoints via automated scripts and alerts.
- Remote Desktop - Provides a real-time remote desktop interface for the visual management and control of endpoints.
- Browser-Based Remote Desktops - Offers remote desktop access through browser-based screen sharing and native RDP connections.
- Alert-Based Script Triggers - Provides automated remediation by triggering specific scripts immediately when system alerts are detected or resolved.
- Remote Software Installers - Pushes software installations to managed Windows endpoints from a central console using package managers.
- Flexible Metadata Stores - Stores flexible, user-defined metadata attributes linked to agents and sites for use in automation.
- Multi-Tenant Data Management - Organizes endpoints into clients and sites with isolated data, scoped permissions, and custom branding.
- Endpoint Onboarding - Automates the execution of configuration and installation scripts immediately after new agents are deployed to standardize device setup.
- Agent-Based Task Queuing - Queues scripts and commands on the server for execution by remote agents during their scheduled check-ins.
- Automation Frameworks - Provides a framework for scheduling recurring tasks, triggering remediation scripts, and automating alert responses.
- Remote Administration - Provides a comprehensive suite for remote shell access, file management, and third-party remote desktop integration.
- Remote Command Execution - Executes shell commands on remote hosts and retrieves their output via interactive terminal sessions.
- Agent Deployment - Installs management agents on remote endpoints via silent installation scripts through a remote console.
- REST API Endpoint Management - Exposes system functionality and management actions to external clients via a secured REST API.
- REST API Diagnostic Endpoint - Exposes system health metrics and management actions via a secured REST API.
- Remote Desktop Clients - Provides remote desktop access featuring custom keystroke injection and clipboard synchronization.
- Remote Management Access - Provides a centralized interface for direct remote screen control and remote file browsing across endpoints.
- Multi-Tenant - Controls user visibility and management capabilities by limiting access to specific customer accounts or endpoints.
- Automated Security Patching - Automates the application of operating system updates to endpoints based on predefined patch policies and schedules.
- User Role Management - Defines roles with specific access levels and assigns them to users to restrict entry to platform features.
- Remote Script Execution - Triggers the execution of library scripts on remote agents via a programmatic API.
- Configuration Inheritance Policies - Implements a hierarchical model where settings cascade from global levels down to individual agents.
- Endpoint Automation Workflows - Executes sequential scripts and scheduled tasks on remote agents to automate routine IT administration.
- Endpoint Data Retrieval APIs - Provides an API to retrieve detailed agent information, including installed software and service statuses.
- Endpoint Health Monitoring - Runs recurring scripts on endpoints to trigger alerts based on custom return codes and failures.
- Hierarchical Policy Deployment - Distributes checks, automated tasks, alert templates, and patch settings across global, client, site, and agent levels.
- Interactive Remote Shells - Opens a live command-line interface to execute instructions on remote endpoints in real time.
- IT Asset Management - Collects and catalogs hardware specifications and installed software across a network of managed devices.
- Node Health Tracking - Tracks CPU, disk, memory, and service status for endpoints and triggers alerts when thresholds are met.
- Remote Desktop Software - Provides direct remote screen control and file system access to managed devices for troubleshooting.
- Remote File Managers - Provides a real-time browser interface for accessing and managing the file system of remote endpoints.
- Remote Script Execution - Enables the execution of scripts and commands across multiple endpoints with centralized output management.
- Software Inventory Management - Collects and catalogs detailed hardware specifications and installed software across all managed endpoints.
- Patch Management - Manages Windows update timing, specific patch selection, and reboot behavior across managed endpoints.
- Exit-Code Monitoring - Triggers alerts based on the exit codes of scripts run periodically on remote agents.
- Third-Party Application Management - Installs and updates third-party software on Windows endpoints through integration with the Chocolatey package manager.
- Update Control Managers - Manages and schedules the installation and deployment of operating system updates across Windows endpoints.
- Automated Schedulers - Runs administrative jobs and scripts on a fixed timetable across all targeted network endpoints.
- Scoped Report Generation - Produces reports for specific clients or sites through an organizational tree action.
- Help Desk Ticketing Integrations - Integrates with external help desks via webhooks to automate ticket creation from system alerts.
- Data Report Exporting - Renders completed report templates into static formats including HTML, PDF, and Plain Text.
- Custom Data Fields - Provides tools for defining and managing user-defined data attributes as metadata for agents, sites, and clients.
- Template-Based Reports - Generates formatted PDF and HTML reports by injecting system data into Markdown or HTML templates.
- Sequential Script Executors - Executes a sequence of commands or scripts on remote endpoints using flexible scheduling options.
- Chocolatey Package Support - Integrates with the Chocolatey package manager to handle software installation and patching on Windows endpoints.
- Device Agent Settings - Configures global defaults for agent updates, timezones, and policy assignments to standardize behavior across devices.
- Remote File Transfers - Implements secure file transfer sessions to move data between the administrative console and managed devices.
- Script Execution Result Handlers - Captures the output and results of script executions directly into custom fields for tracking and reporting.
- Remediation Script Execution - Executes specific remediation scripts automatically when a system check fails to resolve the identified issue.
- Security Agent Deployments - Enables remote installation of antivirus and security agents using deployment scripts.
- Task Queuing Systems - Queues scripts and tasks on the server to be executed by endpoints immediately upon their next connection.
- Task Scheduling - Leverages the native OS task scheduler on remote agents to ensure automated execution of administrative jobs.
- Script Sequences - Runs multiple scripts or commands in a specific order with conditional logic to halt or continue based on success.
- Collector Task Scheduling - Creates recurring daily, weekly, or monthly automated tasks to collect diagnostic data from remote endpoints.
- Bulk Remote Execution - Allows executing configuration changes or commands across multiple remote hosts simultaneously.
- Remote Control Integration - Links third-party remote desktop identifiers to agent profiles to launch remote control sessions.
- Third-Party Remote Tool Integrations - Connects third-party remote desktop software to the console by collecting unique device identifiers via scripts.
- Windows Registry Modifiers - Allows remote modification of Windows registry configuration keys to manage endpoint behavior.
- Binary Signing - Uses digital certificates to sign agent executables and installers to ensure authenticity and reduce security warnings.
- OIDC Identity Integrations - Delegates user authentication to external identity providers using the OpenID Connect protocol.
- Password Management - Rotates and stores unique local administrator passwords for managed endpoints via scheduled tasks.
- Single Sign-On Integrations - Authenticates users via any OIDC-compatible identity provider for centralized access.
- Webhook Event Notifications - Provides automated push notifications to external URLs via configurable JSON bodies when system events occur.
- Service Management - Ships tools to start, stop, and configure background system services on remote endpoints to ensure availability.
- Alert Notification Systems - Implements configurable notification channels including email, SMS, and webhooks for real-time system alerts.
- Template-Driven Alerts - Standardizes alerting behavior by applying notification settings and severity rules via dynamic templates.
- Application Uninstallers - Removes applications from remote endpoints by executing developer-defined uninstall strings.
- Audit Logs - Provides system activity logs with filtering capabilities to track administrative changes across agents.
- Automated Data Collection - Implements background tasks that capture command output and automatically save it into custom endpoint metadata fields.
- Cross-Platform Agent Deployment - Installs management software across various operating systems using installers, scripts, or binaries.
- Dynamic Script Argument Injection - Passes stored custom field values as dynamic arguments into automation scripts for personalized endpoint execution.
- Endpoint Onboarding Automation - Deploys standardized configuration profiles and onboarding tasks to new workstations and servers.
- Endpoint Status Reporting - Creates formatted reports of agent statuses by combining custom fields and automation policies.
- Exit Code Pipeline Mappings - Uses script exit codes to categorize alert severity and trigger automated remediation tasks.
- Health Check Thresholds - Configures offline and overdue time limits to define failure sensitivity for agent monitoring.
- Automated Alerting Workflows - Executes scripts or sends webhooks automatically in response to system alerts being triggered or resolved.
- Server Status Monitors - Displays the real-time operational state of managed servers within a centralized dashboard.
- Remote Event Log Querying - Searches and retrieves entries from OS application, system, and security logs for troubleshooting and auditing.
- Agent Connectivity Restoration - Restores connectivity to malfunctioning endpoint agents via a recovery menu or remote shell access.
- Remote Logging Utilities - Retrieves and analyzes system and application event logs directly from remote machines.
- Remote Process Management - Allows administrators to monitor real-time process resource usage and terminate tasks on remote endpoints.
- Remote Service Auditing - Identifies endpoints running specific Windows services and retrieves their current operational status.
- Service Controllers - Provides utilities to monitor and control the state of operating system services on remote machines.
- System Event Logging - Retrieves and inspects system event logs to diagnose errors and monitor security events.
- Monitoring Data Visualization - Integrates a third-party dashboarding engine to visualize remote endpoint data through graphical charts.
- Agent Software Updates - Triggers remote agent software updates automatically via schedules or through a central management interface.
- Template-Based Variable Injection - Injects system data and model properties into scripts as arguments or environment variables using a template syntax.
- Windows Update Controllers - Provides granular control to block specific Windows updates from being installed on managed endpoints.
- White Labeling - Enables replacement of default logos, colors, and UI elements with custom organizational branding.
- Agent Grouping - Organizes agents into groups using tags and categories to simplify bulk device management.
- Third-Party Client Session Launches - Triggers external session URLs to launch third-party remote support software based on network details.
- Multi-Protocol Remote Session Launches - Facilitates direct access to remote desktop sessions via URL-based launching from the central dashboard.
Star history
How this analysis was created: This summary and feature list were written by an AI model that read the project's README and public documentation pages. Each feature links to the documentation it came from; stars, license and language come straight from the GitHub API. The model does not read the source code, and the analysis is refreshed when the project is re-analysed. Learn more on our About page.
