Products/BE Hub
Windows, Linux, macOS, FreeBSD firewalls, 4G routers, ZFS storage and ESXi hosts in one fleet—priced per technician with unlimited machines. The AI investigates faults in 30 seconds read-only, writes the exact command, and waits for a named person to approve. Every agent binary is verified against an offline Ed25519 key.
How a fault goes
Endpoints, OPNsense/pfSense, VyOS, Teltonika 4G routers, ZFS pools, Docker and agentless ESXi—with grace windows so planned reboots never page.
BE AI pulls live diagnostics, logs and metrics in seconds and writes a root-cause conclusion with confidence scoring.
Every mutating action—service restart, script, patch or security hardening—is parked as a human-readable proposal.
A named technician approves in the console or over MCP. BE Hub verifies the fix and auto-updates your knowledge base.
What's in it
Built to replace bloated per-endpoint RMM bills and separate PSA subscriptions—hosted by us in Australia or run in your own rack.
Scores every Windows and Linux machine daily out of 100, matches software against OSV, CISA KEV and NVD locally with zero data leakage, and lines up group fixes with 1-click Undo and monthly executive PDFs.
Security checksInbound email tickets (with custom-domain SPF/DKIM), SLA clocks, customer portal, one-shot AI ticket triage against live machine state, and a knowledge base that writes itself as tickets resolve.
Tickets and KBNative static Go agents for Windows, Linux, macOS, FreeBSD (OPNsense/pfSense/TrueNAS), OpenWrt/Teltonika 4G cellular failover and VyOS, plus SSH proxy for VMware ESXi.
Supported platformsOffline Ed25519 release signing, local-only allow_shell gate on the machine, loopback-bound UltraVNC (user + SYSTEM modes), and strict AI exclusion from pixel and file tools.
Security architectureAdd managed external nmap/Nuclei scanning, host privilege-escalation and redacted secret checks, daily Microsoft 365 / Entra ID Graph posture audits, and human-approved validation proofs.
Essential Eight & M365 postureConnect BE Teammate in Microsoft Teams or your own AI assistants over POST /mcp to query fleet health, triage tickets, run reports and review proposals under user-scoped permissions.
MCP documentationExecutive fleet health, Essential Eight 48-hour critical SLA tracking, disk-full capacity forecasts, software inventory, ticket workload and scheduled PDF/CSV email delivery.
All featuresDelegate scoped access to a customer's internal IT person or restrict junior technicians by operational area (desktops, servers, network, security, billing).
Run BE Hub in read-only shadow mode on up to 100 devices alongside NinjaOne, ConnectWise, Datto or Atera for 30 days, with overlap credit when you cut over.
Start an RMM ExitAlso from BE HubThe product in fullRMM pricing in AUDEssential Eight & M365 postureAtera alternativeReplace your RMMSecurity checksSecurity architecturePlatformsIntegrationsCasesPreventative maintenanceDocsHow it worksCompareGuidesWho it's forNinjaOne alternative Australia ($105/tech)Datto RMM & ConnectWise alternativeCVE patching with 1-click rollbackVMware ESXi & Proxmox ZFS monitoringTeltonika 4G/5G & OPNsense/pfSense monitoring
Plans and pricing