ITOps360 · Available
Fix problems before they become tickets
Tickets, devices, identities, network assets and backup health in one service desk that spots trouble on its own, offers the fixes your policy allows and checks each one worked.
- 14-factor
- device health score
- 19 actions
- Low→Critical, governed
- 0 tickets
- when it fixes itself
What ITOps360 covers
Service desk
- Ticket lifecycle with SLAs, pause in waiting, breach escalation
- Employee assistant in Microsoft Teams and Slack: raise and follow tickets, unlock an account, Fix My Computer and group requests, with or without AI
- AI categorization, routing and duplicate detection with visible signals
- Knowledge base with four-eyes publishing and AI drafts from resolved tickets
- Merge duplicate tickets into one (the duplicates close as merged and stay read-only), a workload view of open, at-risk and overdue tickets per technician, and portal announcements with "This affects me too"
- Saved views and group-by on tickets, devices, assets, alerts and patching, private or shared with your team
- Satisfaction (CSAT) ratings on resolved tickets, surfaced in dashboards and reports
- Employee portal, software catalog and request forms, with a built-in library of default request templates (password reset, onboarding, offboarding, access, group, license and more)
Endpoints
- Device health from 14 weighted factors
- Patch installation through the agent in rings, inside maintenance windows, with approval and verification (off until you turn it on)
- Proactive recommendations that close themselves when fixed
- Fix My Computer: live diagnostics and policy-filtered fixes
- Lost or stolen device response in one action: disable the owner's sign-in, rotate and escrow BitLocker, remote-lock and locate Intune devices, and queue a wipe for the next check-in — under approval and audit, reversible on recovery
- Microsoft Intune, agentless WinRM/SSH, or the ITOps360 agent for Windows, macOS and Linux
Identity
- Active Directory sign-in and directory data over LDAPS
- Microsoft Entra ID users, MFA registration, licenses and sign-in activity
- Connect several Entra and Intune tenants to one account — one multi-tenant app, with every action routed back to the right tenant (MSPs and multi-tenant estates)
- Create members or invite Microsoft 365 guests for the same person across many tenants in one action, with per-tenant licenses, groups and one-time passwords
- Self-service group creation (security, Microsoft 365, distribution) and membership, approval-routed to a manager or admin
- Zero Trust context on every user and device
- Group-to-role mapping re-applied at every sign-in
- Leaver offboarding in one approved case: sign-in, sessions, licenses, groups, devices and tickets, with the manual steps tracked
Infrastructure
- Site collector for discovery without inbound connections
- SNMP v1/v2c/v3, LLDP/CDP, switch MAC tables, ARP and AD
- Unified asset inventory with rogue and unmanaged device review
- Topology, monitoring, alert correlation and warranty status
- Attack-path analysis that traces how an exposure on one asset reaches the crown jewels, reading posture only — it never touches the exploit
Backup health
- Backup health from BackupVision360 and the tools you already run (Veeam, Cove, Datto, Acronis and more): per-device health, alerts and tickets
- Backing up and restoring is moving to BackupVision360, which takes over existing ITOps360 backup plans and restore points
- Credential vault: shared secrets encrypted, revealed only with step-up, every disclosure audited
Automation
- An allow-list of actions from Low to Critical risk
- Approval by a different person; MFA step-up for high risk
- Network port actions with guardrails and read-back verification
- Workflows from metric triggers, with dry run and ticket on failure
Audit and insight
- Hash-chained audit trail the database will not let anyone edit
- Executive, helpdesk and endpoint dashboards with published KPI definitions
- Tickets prevented, hours saved and automation success rate
- A self-serve report builder: pick metrics, dimensions and filters, save the view, export to CSV or Excel, and schedule it by e-mail
- Notifications to Teams, Slack, e-mail and signed webhooks
How it works
Connect identity and devices
Sign in with Active Directory or Entra ID, connect Intune, or deploy the agent where there is no endpoint manager.
Discover the estate
A collector at each site maps switches, servers, printers and unmanaged devices using read-only protocols, and passive ranges are never probed.
Fix with policy
Low-risk fixes run on their own when policy allows it; anything riskier waits for a second person. Every job sent to a device is signed.
Verify and learn
A run stays open until the device reports the intended state. Confirmed resolutions train categorization and feed the knowledge base.
Works with
- Active Directory
- Microsoft Entra ID
- Microsoft Intune
- Microsoft Graph
- SNMP
- WinRM
- SSH
- Dell, Lenovo, HP and Cisco warranty
- Microsoft Teams
- Slack
- SMTP
- Webhooks
- OpenID Connect
Deployment
- Docker Compose on a single Linux VM
- Kubernetes manifests for larger estates
- Collectors on Linux or Windows at each site
- Agents for Windows, macOS and Linux
- Installable mobile app (PWA) for phones and tablets, add it to the home screen, no app store
On the roadmap
- E-mail to ticket for IMAP and Google Workspace (Microsoft 365 is supported)
- Ticket updates and approvals pushed into Teams and Slack
- Remote assistance for technicians
- Product branding: name, logo and custom domain
- Multiple AD forests and identity correlation across AD and Entra
Check where you stand
Free, about five minutes, scored in your browser. Nothing is sent unless you ask for the report.
ITOps Maturity Assessment
How proactive, automated and measured your IT operations are. 9 questions, about 5 minutes.
Identity Risk Assessment
Human and machine identity risk across directories and clouds. 8 questions, about 5 minutes.
Entra ID Security Assessment
Identity security in Microsoft Entra ID. 8 questions, about 5 minutes.
Questions people ask
Do we need Intune?
No. Devices can be managed through Intune, agentless WinRM or SSH through a collector, or the ITOps360 agent. A device seen by several paths is one asset.
Does the collector need inbound firewall rules?
No. Collectors call out over HTTPS. Credentials are sealed to each collector's own key, so the server cannot read device passwords.
Can the assistant run any command?
No. There is no free-form shell. The assistant can only offer actions from the allow-list that the policy engine returns as executable for that user and device.
Is ITOps360 licensed separately?
Yes. It has its own plan, license and roles, and plan limits are enforced in the product. With one CloudVision360 sign-in, people open it from My Apps alongside your other apps, and it still applies its own permissions.
See it on your own estate
Walk through your clouds, identities and devices with a specialist in 30 minutes, or get a scored report from a free assessment.