Every machine you run, checking in and fixing itself.
SentinelOps puts a small agent on each Windows, Mac and Linux machine. You see their health in one console, reach any of them remotely, patch them on schedule, and let Self-Healing repair known faults before anyone files a ticket.
| FRONTDESK-01 | Windows 11 | 4s ago | healthy |
| mail-01 | Ubuntu 24.04 | 9s ago | self-healed |
| xray-ws | Windows 10 | 12s ago | 3 patches |
| office-mac | macOS 15 | 21s ago | healthy |
| hv-01 | XCP-ng host | 30s ago | healthy |
One agent. Everything you’d otherwise buy five tools for.
The full list comes from the product’s own feature registry, so it only shows what’s actually built. See every feature.
Health and alerts
Know a machine is in trouble before its user does.
- Live heartbeats and service checks
- Log monitoring across the fleet
- Unusual-behaviour alerts
- Daily critical-issues email
Self-Healing
Known faults get fixed, checked, and reported back to you.
- Rules you can turn on per fault
- Fix is verified before the alert closes
- “Resolved” email when it’s done
- Flags faults that keep coming back
Remote access
Get onto any machine without a VPN or port forwarding.
- Remote desktop and terminal
- File manager
- Session recording and audit trail
- Wake-on-LAN
Updates and software
Keep every OS and app current on a schedule you set.
- Patch dashboard across all platforms
- Software library: upload once, deploy anywhere
- Scheduled app updates
- Reinstall an OS on next boot
Security
Hardening applied by the agent, not by a checklist.
- Brute-force blocking and country blocking
- SSH lockdown
- Vulnerability scanning
- Rotated local admin passwords
Network and hosts
See what’s on the network and what runs on your hypervisors.
- Discovery and network map
- SNMP devices and switch ports
- XCP-ng hosts and VMs
- Backup monitoring
Built for MSPs
Many customers, one console, clean separation.
- Tenants, groups and roles
- Customer single sign-on
- Billing and quarterly reviews
- Phone and tablet apps
Korthveil firewalls
Firewalls enroll like any machine and are watched hands-off.
- Health and events on one screen
- Never-block list kept in sync
- Port-knock protected link
API and plugins
Everything in the console is also in the API.
- Full REST API with tokens
- Plugins and scripts
- Syslog forwarding
From alert to “resolved” without a human.
A real repair from a mail server, start to finish.
The log reports a fault
The agent reads the system log and spots a known error.
spamd: compiled rules out of dateThe matching rule runs
The agent runs the fix on that machine, with a cooldown so it never loops.
rule spamassassin-recompileThe fix is checked
SentinelOps confirms the error stopped before it calls the job done.
check passed · 0 new errorsYou get told it’s fixed
The alert closes and a “resolved” email goes out. Repeats get flagged.
alert closed · email sentYour firewall and your fleet, on speaking terms.
- Hands-off monitoring. SentinelOps watches the firewall’s health and never overrides its blocking.
- Never-block list. Your managed machines and trusted networks are sent to the firewall so it never cuts them off.
- Locked-down link. The firewall reaches SentinelOps with a certificate and a port knock, and nothing else can.
- One account. The same sign-in, licence and support desk as Korthveil.
What you get here that the big three don’t list.
Self-hosting, XCP-ng hosts, country blocking on every machine, and a firewall that works with your RMM. See the comparison with Kaseya VSA, Datto RMM and NinjaOne.
Bring your first machines in today.
Sign in with your Korthveil account, download one installer, and machines appear in the console as they check in.