Features

One dashboard for every client server

Everything below is available today. Items marked “coming soon” are on our roadmap but not yet shipped.

Multi-tenant server management

Bring every client's servers into one dashboard, organised by organisation, environment and client tag.

SSH-based provisioning and remediation blueprints

The OpsDeck Engine provisions stacks and fixes findings over SSH (or our outbound-only agent) with our own declarative Blueprint DSL — no third-party automation tool involved.

Scheduled security audits with A–F scoring

Recurring hardening audits score every server from A to F, with a full history so you can prove drift is fixed, not just flagged.

One-click fixes

Turn a failing check into a queued remediation job in a single click, with a full run log.

Three ways to add a server

Plain SSH connection details, an AWS or DigitalOcean cloud import, or claiming the results of a free scan you already ran.

Activity and audit log

Every mutation — who did what, when, from where — kept for your organisation's retention window.

Role-based access control

Owner, admin, engineer and viewer roles with scoped permissions across the dashboard.

Two-factor authentication

TOTP-based 2FA with recovery codes, optionally required org-wide.

Encrypted secrets storage

SSH keys, passwords and tokens are encrypted at rest and masked everywhere they could otherwise leak — logs, job output, variables.

Metrics and alert rules

CPU, memory, disk and load samples per server, with threshold-based alert rules and notification channels.

See it on your own servers

Run a free scan first, no signup required.