Tacticalrmm

TacticalRMM is a remote monitoring and management platform designed for overseeing endpoints and automating IT administration. It functions as an endpoint management tool and IT automation framework, providing a centralized dashboard for executing scripts, monitoring system health, and managing remote devices across multiple tenants.

The platform distinguishes itself through a comprehensive remote administration suite that includes real-time shell access, remote file management, and registry editing. It integrates with third-party remote desktop software and provides a hierarchical policy inheritance model, allowing settings to cascade from global levels down to individual agents.

Broad capabilities cover automated operating system patching, hardware and software asset inventory, and a robust monitoring system with exit-code-driven alerting. The system also includes identity integration via OpenID Connect for single sign-on, a template-based reporting engine for generating PDF and HTML documents, and a REST API for programmatic endpoint control.

The server can be deployed using container images and configured behind a reverse proxy for SSL termination.

Features

Endpoint Management Tools - Serves as a comprehensive tool for deploying agents, auditing installed software, and managing hardware inventories.
Remote Monitoring and Management Platforms - Functions as a full RMM platform for overseeing endpoints and automating IT administration.
Remote Monitoring Dashboards - Provides a centralized dashboard for monitoring system health and managing endpoints via automated scripts and alerts.
Remote Desktop - Provides a real-time remote desktop interface for the visual management and control of endpoints.
Browser-Based Remote Desktops - Offers remote desktop access through browser-based screen sharing and native RDP connections.
Alert-Based Script Triggers - Provides automated remediation by triggering specific scripts immediately when system alerts are detected or resolved.
Remote Software Installers - Pushes software installations to managed Windows endpoints from a central console using package managers.
Flexible Metadata Stores - Stores flexible, user-defined metadata attributes linked to agents and sites for use in automation.
Multi-Tenant Data Management - Organizes endpoints into clients and sites with isolated data, scoped permissions, and custom branding.
Endpoint Onboarding - Automates the execution of configuration and installation scripts immediately after new agents are deployed to standardize device setup.
Agent-Based Task Queuing - Queues scripts and commands on the server for execution by remote agents during their scheduled check-ins.
Automation Frameworks - Provides a framework for scheduling recurring tasks, triggering remediation scripts, and automating alert responses.
Remote Administration - Provides a comprehensive suite for remote shell access, file management, and third-party remote desktop integration.
Remote Command Execution - Executes shell commands on remote hosts and retrieves their output via interactive terminal sessions.
Agent Deployment - Installs management agents on remote endpoints via silent installation scripts through a remote console.
REST API Endpoint Management - Exposes system functionality and management actions to external clients via a secured REST API.
REST API Diagnostic Endpoint - Exposes system health metrics and management actions via a secured REST API.
Remote Desktop Clients - Provides remote desktop access featuring custom keystroke injection and clipboard synchronization.
Remote Management Access - Provides a centralized interface for direct remote screen control and remote file browsing across endpoints.
Multi-Tenant - Controls user visibility and management capabilities by limiting access to specific customer accounts or endpoints.
Automated Security Patching - Automates the application of operating system updates to endpoints based on predefined patch policies and schedules.
User Role Management - Defines roles with specific access levels and assigns them to users to restrict entry to platform features.
Remote Script Execution - Triggers the execution of library scripts on remote agents via a programmatic API.
Configuration Inheritance Policies - Implements a hierarchical model where settings cascade from global levels down to individual agents.
Endpoint Automation Workflows - Executes sequential scripts and scheduled tasks on remote agents to automate routine IT administration.
Endpoint Data Retrieval APIs - Provides an API to retrieve detailed agent information, including installed software and service statuses.
Endpoint Health Monitoring - Runs recurring scripts on endpoints to trigger alerts based on custom return codes and failures.
Hierarchical Policy Deployment - Distributes checks, automated tasks, alert templates, and patch settings across global, client, site, and agent levels.
Interactive Remote Shells - Opens a live command-line interface to execute instructions on remote endpoints in real time.
IT Asset Management - Collects and catalogs hardware specifications and installed software across a network of managed devices.
Node Health Tracking - Tracks CPU, disk, memory, and service status for endpoints and triggers alerts when thresholds are met.
Remote Desktop Software - Provides direct remote screen control and file system access to managed devices for troubleshooting.
Remote File Managers - Provides a real-time browser interface for accessing and managing the file system of remote endpoints.
Remote Script Execution - Enables the execution of scripts and commands across multiple endpoints with centralized output management.
Software Inventory Management - Collects and catalogs detailed hardware specifications and installed software across all managed endpoints.
Patch Management - Manages Windows update timing, specific patch selection, and reboot behavior across managed endpoints.
Exit-Code Monitoring - Triggers alerts based on the exit codes of scripts run periodically on remote agents.
Third-Party Application Management - Installs and updates third-party software on Windows endpoints through integration with the Chocolatey package manager.
Update Control Managers - Manages and schedules the installation and deployment of operating system updates across Windows endpoints.
Automated Schedulers - Runs administrative jobs and scripts on a fixed timetable across all targeted network endpoints.
Scoped Report Generation - Produces reports for specific clients or sites through an organizational tree action.
Help Desk Ticketing Integrations - Integrates with external help desks via webhooks to automate ticket creation from system alerts.
Data Report Exporting - Renders completed report templates into static formats including HTML, PDF, and Plain Text.
Custom Data Fields - Provides tools for defining and managing user-defined data attributes as metadata for agents, sites, and clients.
Template-Based Reports - Generates formatted PDF and HTML reports by injecting system data into Markdown or HTML templates.
Sequential Script Executors - Executes a sequence of commands or scripts on remote endpoints using flexible scheduling options.
Chocolatey Package Support - Integrates with the Chocolatey package manager to handle software installation and patching on Windows endpoints.
Device Agent Settings - Configures global defaults for agent updates, timezones, and policy assignments to standardize behavior across devices.
Remote File Transfers - Implements secure file transfer sessions to move data between the administrative console and managed devices.
Script Execution Result Handlers - Captures the output and results of script executions directly into custom fields for tracking and reporting.
Remediation Script Execution - Executes specific remediation scripts automatically when a system check fails to resolve the identified issue.
Security Agent Deployments - Enables remote installation of antivirus and security agents using deployment scripts.
Task Queuing Systems - Queues scripts and tasks on the server to be executed by endpoints immediately upon their next connection.
Task Scheduling - Leverages the native OS task scheduler on remote agents to ensure automated execution of administrative jobs.
Script Sequences - Runs multiple scripts or commands in a specific order with conditional logic to halt or continue based on success.
Collector Task Scheduling - Creates recurring daily, weekly, or monthly automated tasks to collect diagnostic data from remote endpoints.
Bulk Remote Execution - Allows executing configuration changes or commands across multiple remote hosts simultaneously.
Remote Control Integration - Links third-party remote desktop identifiers to agent profiles to launch remote control sessions.
Third-Party Remote Tool Integrations - Connects third-party remote desktop software to the console by collecting unique device identifiers via scripts.
Windows Registry Modifiers - Allows remote modification of Windows registry configuration keys to manage endpoint behavior.
Binary Signing - Uses digital certificates to sign agent executables and installers to ensure authenticity and reduce security warnings.
OIDC Identity Integrations - Delegates user authentication to external identity providers using the OpenID Connect protocol.
Password Management - Rotates and stores unique local administrator passwords for managed endpoints via scheduled tasks.
Single Sign-On Integrations - Authenticates users via any OIDC-compatible identity provider for centralized access.
Webhook Event Notifications - Provides automated push notifications to external URLs via configurable JSON bodies when system events occur.
Service Management - Ships tools to start, stop, and configure background system services on remote endpoints to ensure availability.
Alert Notification Systems - Implements configurable notification channels including email, SMS, and webhooks for real-time system alerts.
Template-Driven Alerts - Standardizes alerting behavior by applying notification settings and severity rules via dynamic templates.
Application Uninstallers - Removes applications from remote endpoints by executing developer-defined uninstall strings.
Audit Logs - Provides system activity logs with filtering capabilities to track administrative changes across agents.
Automated Data Collection - Implements background tasks that capture command output and automatically save it into custom endpoint metadata fields.
Cross-Platform Agent Deployment - Installs management software across various operating systems using installers, scripts, or binaries.
Dynamic Script Argument Injection - Passes stored custom field values as dynamic arguments into automation scripts for personalized endpoint execution.
Endpoint Onboarding Automation - Deploys standardized configuration profiles and onboarding tasks to new workstations and servers.
Endpoint Status Reporting - Creates formatted reports of agent statuses by combining custom fields and automation policies.
Exit Code Pipeline Mappings - Uses script exit codes to categorize alert severity and trigger automated remediation tasks.
Health Check Thresholds - Configures offline and overdue time limits to define failure sensitivity for agent monitoring.
Automated Alerting Workflows - Executes scripts or sends webhooks automatically in response to system alerts being triggered or resolved.
Server Status Monitors - Displays the real-time operational state of managed servers within a centralized dashboard.
Remote Event Log Querying - Searches and retrieves entries from OS application, system, and security logs for troubleshooting and auditing.
Agent Connectivity Restoration - Restores connectivity to malfunctioning endpoint agents via a recovery menu or remote shell access.
Remote Logging Utilities - Retrieves and analyzes system and application event logs directly from remote machines.
Remote Process Management - Allows administrators to monitor real-time process resource usage and terminate tasks on remote endpoints.
Remote Service Auditing - Identifies endpoints running specific Windows services and retrieves their current operational status.
Service Controllers - Provides utilities to monitor and control the state of operating system services on remote machines.
System Event Logging - Retrieves and inspects system event logs to diagnose errors and monitor security events.
Monitoring Data Visualization - Integrates a third-party dashboarding engine to visualize remote endpoint data through graphical charts.
Agent Software Updates - Triggers remote agent software updates automatically via schedules or through a central management interface.
Template-Based Variable Injection - Injects system data and model properties into scripts as arguments or environment variables using a template syntax.
Windows Update Controllers - Provides granular control to block specific Windows updates from being installed on managed endpoints.
White Labeling - Enables replacement of default logos, colors, and UI elements with custom organizational branding.
Agent Grouping - Organizes agents into groups using tags and categories to simplify bulk device management.
Third-Party Client Session Launches - Triggers external session URLs to launch third-party remote support software based on network details.
Multi-Protocol Remote Session Launches - Facilitates direct access to remote desktop sessions via URL-based launching from the central dashboard.

kunkundi/crossdesk

3,776View on GitHub

Crossdesk is a cross-platform remote desktop software used for streaming and controlling remote computers. It consists of a hardware-accelerated video streamer and a web-based client that allows users to operate remote devices through a browser without installing platform-specific software. The system utilizes a self-hosted connection relay deployed via containers to manage remote sessions and forward traffic when direct peer-to-peer connections fail. To maintain performance, it employs hardware-accelerated video encoding and streaming to reduce latency and CPU load. The software provides cr

Velocidex/velociraptor

3,769View on GitHub

Velociraptor is a digital forensics and incident response platform, endpoint detection and response system, and visibility tool. It provides a query engine and remote forensic collector used to hunt for indicators of compromise and perform triage across a fleet of hosts. The system is distinguished by its specialized query language for interrogating host state and parsing binary files. It features a notebook environment that combines markdown documentation with executable query cells to standardize investigative workflows and enable collaborative reporting. The platform covers a wide range o

WordPress/WordPress

21,196View on GitHub

WordPress is an open-source content management system and PHP-based application framework designed for building and maintaining websites. It functions as a visual, block-based website builder that allows users to construct layouts and manage digital content without manual code entry. The platform supports a wide range of operational needs, from managing individual sites to administering complex multi-site networks from a single installation. The system is distinguished by its highly extensible, plugin-driven modular architecture, which allows for the integration of third-party modules to add

fleetdm/fleet

6,058View on GitHub

Fleet is an open-source device management platform that provides centralized control over computing devices running macOS, Linux, Windows, Chromebooks, iOS, and Android. It enables organizations to enroll devices, collect real-time telemetry, enforce security compliance policies, and manage software remotely from a single system. The platform can be deployed as a single binary, run locally for testing, or scaled horizontally across cloud infrastructure on AWS, Kubernetes, GCP, or Render, with support for high availability through database replication and load balancing. The platform distingui

amidawaretacticalrmm

Features