Generate an enrollment token and install the NodeWatch agent on a machine.
CPU Usage
Memory Usage
Disk I/O
Disk IOPS
Disk Usage
Ceph Cluster
Supermicro IPMI
Hardware Environment
Sensors online
Temperatures
Fan Speed
Alert Toggles
CPU alerts
Trigger alerts when CPU usage exceeds thresholds
Memory alerts
Trigger alerts when memory usage exceeds thresholds
Disk alerts
Trigger alerts when disk usage exceeds thresholds
Monitored disks
All eligible disks are monitored by default. Uncheck any disk to customize.
Load average alerts
Trigger alerts when 1-minute load exceeds the configured value or host CPU capacity
File descriptor alerts
Trigger alerts when FD usage approaches system limit (Linux)
Ceph cluster monitors
Ceph alerts are shared across all reporting nodes. Configure them once on the Clusters page.
Stale WireGuard alerts
Trigger alerts when WireGuard interfaces are DOWN or missing IP
Offline alerts
Trigger alert when agent stops sending heartbeats
Threshold Values
AI Assistant
Enter to send
AI Assistant
Click Refresh to load processes
Click Refresh to load services
Scripts
Name
Language
OS
Tags
Timeout
No scripts yet
Create a script to run commands across your agents.
Scheduled Tasks
Automations that run later or repeat: install updates, reboot, run a script, or send an email. Schedule times are UTC. The AI can also create these from chat. One-shot tasks are removed from this list once they run; their runs stay in Run History.
Task
Schedule
Targets
Next Run
Last Run
Enabled
No scheduled tasks
Create a task to run updates, reboot machines, run scripts, or send emails on a schedule, or ask the AI to schedule one for you.
Clients
Name
Contact Email
Phone
Agents
Active
No clients yet
Add a client to start organizing your agents.
O365 Management
Connect customer Microsoft 365 tenants, manage SharePoint backup scope, and jump into Microsoft admin centers.
Connected tenants
0
Backup enabled
0
All-site protection
0
Customers
Select a client
Choose a customer to manage their Microsoft 365 tenant.
NodeWatch Microsoft App
Configure once, then connect each customer with their Microsoft 365 admin.
Backup Storage
Uses the same S3-style storage settings as agent backups.
No backup run loaded.
Protect all SharePoint sites
Disable this to choose individual sites for the customer backup scope.
Select a client first.
Knowledge Base
Global Docs
No global docs yet
Create a document to start building your tenant-wide knowledge base.
Racks
No racks yet
Create a rack for a client to document their equipment layout. Add NodeWatch monitored devices or placeholders and arrange the front and back with drag and drop.
Shared Files
Private tenant files available to technicians and AI agents.
No shared files yet
Upload installers, scripts, and resources that agents use often.
No clients yet
Create clients first, then add documentation for each.
Documents
No documents yet
Create a document to start building client documentation.
Racks
No racks yet
Create a rack for this client to document their equipment layout. Add NodeWatch monitored devices or placeholders and arrange the front and back with drag and drop.
Client Files
Private files scoped to this client and its agents.
No client files yet
Upload an installer or resource for this client.
Drag items to move them to another U slot, or drag a monitored device from the panel into the rack — on touch, press and hold, then drag. Click an empty U slot to add an item there. Click an item to edit its details.
Users
First Name
Last Name
Email
Username
Role
Sudo
SSH Keys
Last Login
Users
User
Username
Sudo
Keys
User Groups
Group
Members
Devices
Hostname
Status
Groups
OS
Device Groups
Group (Tag)
Devices
Assignments
User
Username
Target
Created
Sessions
Remote desktop history and active connections
Agent
User
Started
Status
IP
Action
AI Chats
Title
Scope
Client
Owner
Agent
Messages
Updated
Pending Tray Support Approvals
Agent
Command
Requested By
Created
Actions
Loading…
Chat
Audit Log
Time
Action
Target
User
IP
Command Approvals
Every command the AI has run and how it was approved. Pin a command to Prompt every time, Always allow, or Never allow to control when the AI must ask. Destructive commands always prompt.
Time
Command
Decision
Approved by
Client / Device
Policy
Ceph Clusters
One monitor per FSID, automatically fed by every surviving Proxmox agent.
No Ceph clusters discovered
Install an updated agent on a Ceph-enabled Proxmox node. The cluster is created automatically from its FSID.
Status
Name
IP / URL
Type
Source
Ping
Last Seen
Actions
No web UI configured for this device.
Latency
Availability
Add Network Device
Network Scan
IP
MAC
Ping
Ports
Action
Quick Connect
Open any device's web UI through a bastion agent. No VPN or setup required.
HTTPS is detected automatically on ports 443 / 8443 / 8006 / 9090.
Recent — one click to reopen
Protect your first device
1. Set up tenant storage. 2. Choose a device. 3. Choose folders and schedule, then enable backups.
Backups
Site Bandwidth Allocation
Agents are grouped by public IP (site). Set what % of each site's upload bandwidth to allocate for backups. The limit is divided equally among agents at each site.
Site (Public IP)
Name
Agents
Upload Speed
Backup %
Per-Agent Limit
Microsoft 365 SharePoint Backups
Connect each client's Microsoft 365 tenant with a SharePoint admin account, then choose all sites or individual sites to protect.
Client
Uses the platform Microsoft app configured on the O365 page. No per-client app credentials are needed.
SharePoint Sites
Back up all SharePoint sites
Turn off to select individual sites for this client.
Select a client and authenticate to list SharePoint sites.
Hostname
Status
Last 30 Days
Last Backup
Files
Size
Started
Status
Duration
Files Uploaded
Size
Errors
Backup Run
Error:
Snapshot
Files
Restore Progress
Storage destination
Backup Status
Enable backups
Enable scheduled backups for this agent
Nodewatch Cloud Storage
Your backups are encrypted and stored in Nodewatch-managed infrastructure. Storage credentials and isolation are managed automatically.
Bring Your Own S3 Storage
Encryption
Include Paths
Directories to back up
Exclude Patterns
Files and directories to skip (supports glob patterns)
Schedule
Scheduled backups
Run backups automatically on a schedule
:
Leave all unchecked = every day
Retention
Limits
Settings / Backup Storage
One storage setup for your entire tenant, across all clients and devices. Changes apply only to newly configured devices.
Encrypted managed storage. No storage credentials required.
All clients and devices included. Provider charges are separate. Existing enterprise access remains included.
BYOS Connection Settings
Global S3 and encryption settings used as defaults when configuring backups on new agents.
Existing backups and encryption settings are never migrated by this setup. Saving does not enable any devices.
Infrastructure / Backups
Proxmox Backup Server
Live server discovery, scheduled maintenance jobs, and recent backup task outcomes.
Looking for Proxmox Backup Servers...
Snapshot fleetProxmox VM and container protection
Looking for Proxmox VE snapshot targets...
No alerts
Alerts will appear here when agent metrics exceed thresholds.
Loading APM...
Loading IDS / IPS...
Quick Support
Have the user download and run the Quick Support app. They'll see a session code — enter it below to connect.
Click the dropdown arrow next to Delete, then Keep anyway
Make sure you trust this file
Microsoft Defender SmartScreen couldn't verify this file.
CancelDeleteKeep anyway
4
Open the file. If Windows SmartScreen appears, click More info then Run anyway
1
Click the download warning in Chrome when it says the file may be dangerous or is not commonly downloaded.
2
Choose Keep.
3
If Chrome asks again, confirm with Keep anyway.
4
Open the download. If Windows SmartScreen appears, click More info then Run anyway.
1
Click the download link. If Firefox asks what to do, choose Save File.
2
Open the download from the Downloads button in the top-right corner, or from the Downloads folder.
3
If Windows SmartScreen appears, click More info then Run anyway.
4
Have the user read the session code shown by the app so you can connect.
Package Updates
0 selected
Package
Current
Available
Agents
Policy
Actions
All packages up to date
No pending updates across your fleet.
Deploy Status
Recent Deploys
Platform administration
Companies
Manage customer workspaces and monitor enrolled endpoints.
Companies-
Enrolled agents-
Custom LiveKit-
Custom AI-
Company directory
Agent usage and infrastructure at a glance
Name
Slug
Agents
LiveKit
AI
Created
Exposure intelligence
Endpoint vulnerabilities
Correlated from current software inventories and NIST CPE affected-version ranges.
Critical0
High0
Affected endpoints0
Patch available0
CVE
Severity
Endpoint
Software
Installed
Available
Confidence
Remediation
VULNERABILITY INTELLIGENCE
NIST NVD Feed
Operate the global CVE mirror, inspect ingestion health, and track severity over time.
Sync in progressStarting...
Total CVEs-Mirrored records
Published-Last 30 days
Modified-Last 24 hours
Last successful syncNeverAPI key not configured
Severity profile
Current CVE inventory by highest CVSS score
Publication velocity
Daily CVEs with critical and high exposure highlighted
CVE explorer
Search the local NVD mirror, combine filters, and sort any column.
Loading...
Status
Weakness
Loading CVEs...
Page 1
Feed configuration
The API key is encrypted at rest and is never returned.
Recent syncs
Page and record counts update while a run is active.
Started
Mode
Status
Received
Changes
NVD RECORD
CVE details
Loading...
Invite a Client to Start a Trial
Create a single-use link for a 14-day trial. Links expire in 7 days. Leave email blank to let the client enter their own; share unrestricted links privately.
Trial Signup Links
About saved links
Copy links when created; they cannot be retrieved later. Revoke and replace lost links. Used means redeemed, not necessarily successfully provisioned. Clients receive organization admin access only. The account type chosen at creation decides which interface the account gets; super admins can change it later in tenant settings.
Base prices feed new subscriptions, estimates, and one-off purchases. Existing
subscriptions keep their current Stripe prices until migrated — drift reports flag
any differences. Values are USD per unit per month (or per pack).
Product
Category
Base Price (USD)
Status
Stripe Price ID
Price History
When
Product
Change
Old
New
By
Note
Stripe API Keys
Keys are encrypted at rest (AES-256-GCM) and only their last 8 characters are ever
displayed. Exactly one key set can exist for the platform — saving replaces it.
Deleting returns billing to environment-configured keys (if any).
Loading…
Billing Policy
Operational billing controls for the platform. Each field overrides its
deployment default; rows marked deployment default follow the server
environment until you save a platform value. Changes take effect within a
minute, are recorded in history, and never require a redeploy.
Sends automatic_tax when Stripe Tax is enabled on the Stripe account (probed; fails soft).
Comma-separated: card, link, us_bank_account (alias ach). Unknown entries are rejected.
Comped tenants cancel through support. Rate-override tenants can cancel on the billing page (authenticated, audited, at period end) but not through the Billing Portal — a shared portal link cannot end a negotiated deal.
Loading…
When
Setting
Old
New
By
Note
#
Title
State
Priority
Customer
Owner
Updated
New Ticket
Create a new support ticket
Max 10 files, 25 MB each. You can also paste screenshots or drag files here.
Ticket details
Group
Owner
Subscribers
Get emailed when the customer replies. The owner and group members are notified automatically.
State
Pending Till
at
Priority
Tags
Customer
Timestamps
Created
Updated
Last contact
Pending till
Settings
NodeWatch for Android
Mobile alerts app
Download the Android APK to view alerts and receive push notifications.
NodeWatch Remote Support for Android
Remote-support agent
Download the agent APK to install on Android phones and tablets you want to view and control remotely.
Patch Schedule
Automatically deploy approved patches on a schedule. Times are in UTC.
Enable scheduled patching
Approved patches will be deployed automatically at the configured time
Global Alert Settings
Default offline timeout
Seconds before an agent is considered offline (applies to all agents unless overridden per-agent)
LiveKit Configuration
Override the central LiveKit server for this tenant. Leave blank to use the shared instance.
Currently using central LiveKit server
Agent Tray Icon
Custom icon shown in the Windows system tray. Upload a PNG/ICO image or provide a URL. Recommended size: 64x64 or 128x128.
None
or
Tray Menu Links
Links shown when users left-click the system tray icon. Use these to provide quick access to portals, help pages, or any URL.
Enable systray AI chat by default for this tenant
Backup Storage
Manage storage and billing for your entire tenant.
Clients
Name
Email
Phone
System tray
Remote notice
Loading…
Change Password
Two-Factor Authentication
Add an extra layer of security to your account using a TOTP authenticator app.
Scan this QR code with your authenticator app (Google Authenticator, Authy, etc.)
Allow enabled ticket contacts to sign in and submit requests
Show logo
Display the configured logo above the sign-in heading
Theme colors
Theme contrast passes accessibility checks.
Live sign-in preview
Customer Support
Helpdesk
Username / Email
Password
Sign in
AI Provider
Configure which AI provider powers the assistant. AI Proxy uses the built-in proxy service. Other providers connect via their HTTP APIs.
Platform standard AI
This workspace runs the NodeWatch platform AI configuration. Bring-your-own AI is enabled per workspace by platform administrators.
Using built-in AI Proxy via WebSocket
Custom AI is enabled for this workspace.
Search API
Web-search backend for the AI assistant's web_search tool (global chat, AI Chats, ticket chats, agent chats, and the MCP server). Defaults to the self-hosted SearXNG metasearch instance. If the configured search service is unreachable, chats automatically fall back to the built-in Bing search so the assistant keeps working.
Command Safety
When enabled, the AI must request your approval before executing any command on an agent. You can review the command and optionally add context before allowing or denying.
Require approval for AI commands
Email Channels
Configure IMAP/SMTP email accounts for receiving and sending ticket emails.
Name
Email
IMAP
SMTP
Status
Active
Postmaster Filters
Automatically route and tag incoming emails based on conditions.
Name
Conditions
Actions
Active
Macros
One-click actions to apply to tickets (e.g. Close & Tag as Spam).
Name
Actions
Active
Triggers
Automatic actions when tickets are created or updated (e.g., auto-reply emails, set fields).
Name
Event
Conditions
Actions
Active
Organizations
Companies or groups that contacts belong to.
Name
Shared
Domain
Active
Contacts
Email
First Name
Last Name
Organization
Phone
Active
Actions
Ticket Maintenance
Bulk cleanup tools for the ticket queue. Deletes tickets tagged spam or junk and automated DMARC report noise, along with their messages and attachments. This cannot be undone.
Account Billing
Current usage and estimated monthly billing for this workspace.
loading
Billing estimates are in draft mode until Stripe products and billing meters are finalized.
Estimated Monthly
$0.00
after trial/discounts
Agents
0
usage billed after trial
Network Devices
0
usage billed after trial
Cloud Backup
0 GB
usage based
O365 Backup
0
environment/user units
Loading billing usage...
Invoices
Subscription
Add a card now so your workspace continues uninterrupted after the 14-day trial.
You will be redirected to Stripe to securely save a card. No charge is made while your trial is active.
Loading subscription details...
AI Assistant
Enter to send
Macros
Assign
Agent deployment
Install new agent
Select a platform and client, then choose how this device should enroll.
1. Platform
2. Client Optional
3
Choose an enrollment method
Use a single-use token for one device, or a reusable key for a larger rollout.
Generate a one-time install token.
Create a reusable enrollment key for mass deployment.
Generating...
Run this command on the target machine:
Pending approval — Agents enrolled with this key will appear as "Pending" until an admin approves them in the dashboard.
1. Download and install the remote-support APK on the device:
2. Open the app on the device and scan this QR code — or enter the pairing code manually:
3. Grant the permissions the app requests: notifications, accessibility (for remote control), and battery optimization exemption.
User management
Create User
Set identity, access, and alert delivery preferences.
01
Profile
Account and sign-in details
02
Access
Capabilities and client visibility
03
Notifications
Email and APK routing by alert type and client
User management
Edit User
Manage identity, system access, and notifications.
01
Profile
Identity and operating system access
02
Access
Capabilities and client visibility
03
Notifications
Email and APK routing by alert type and client
Invite User
Share this link with the user. It expires in 7 days.
Edit Billing Overrides
Edit Billing Profile
Create Tenant
LiveKit (optional — leave blank to use central server)
SSH Keys
New SSH Assignment
New User Group
Add Devices to Group
Assign User Group to Target
Edit Tags
Add Email Channel
Inbound (IMAP)
Outbound (SMTP)
Outbound Signature
HTML is appended to all outbound ticket emails. Supports inline styles, images (including embedded base64 logos), and links. Leave blank for no signature.
Available variables
{tech_firstname} — First name{tech_lastname} — Last name{tech_fullname} — Full name{tech_email} — Email address{tech_phone} — Phone number{tech_title} — Job title{ticket_number} — Ticket #{ticket_title} — Ticket subject{support_email} — Support address
Merge Ticket
Add Postmaster Filter
Conditions (match all)
Actions
Add Macro
Delete all spam tickets?
This permanently deletes every ticket tagged spam or junk,
plus automated DMARC report noise, along with their messages and attachments.
This cannot be undone.