Endpoint Administration,
Without Interrupting Users.
Event Viewer, Registry, Device Manager, Certificates, Firewall, Defender, PowerShell, file transfer, Print Management — and yes, Remote Desktop — all from a browser tab. No VPN, no open inbound ports, no screen takeover.
Sure, we offer Remote Desktop. With Palisade, you won't need it.
Not a remote-access tool with extra tabs.
The MMC console, in your browser.
Everything you'd normally launch through Computer Management, an RDP session, or a remote PowerShell prompt — surfaced as real, native administrative tools. No desktop takeover, no jump box, no client to install.
PowerShell Terminal
A real ConPTY session — colour, tab completion, interactive programs.
Registry Editor
Browse hives, read and write keys and values, across the fleet.
Event Viewer
Query any channel with filtering — System, Security, application logs.
Services
List, start, stop, restart, and set startup type.
Task Scheduler
Inspect, run, enable, and disable scheduled tasks.
Device Manager
Enumerate devices and drivers; enable, disable, and inspect.
Certificates
View, import, and remove machine and user certificates.
Users & Groups
Create, rename, reset passwords, manage group membership.
Firewall
Profiles and rules with a dead-man auto-revert on lockout.
Microsoft Defender
Protection status, threat history, and on-demand scans.
Print Management
Printers, queues, drivers, ports — and cross-device install.
Power Options
Power plans, sleep and hibernate behaviour, fast startup.
Software
Installed-app inventory and silent remote uninstall.
Licensing
Activation state, edition, KMS; install keys, rearm, repair.
File Manager
Browse, upload, download, and move files on any path.
Task Manager
Live process list with CPU/memory and one-click kill.
A real PTY, not a command runner.
The terminal runs over ConPTY — the same allocation Windows uses natively. Colour output, tab completion, progress bars, and interactive programs all work as expected. It is not a web terminal stub that pipes strings into cmd.
- Full PowerShell 5 and cmd sessions with interactive prompt
- ConPTY allocation preserves ANSI colour and cursor control
- Session persists across browser navigation — reconnects on page refresh
- Pop out to a dedicated window for sustained administration sessions
Your entire fleet, at a glance.
Every enrolled endpoint reports its hostname, OS build, CPU, RAM, disk utilisation, public and LAN IP, and the currently logged-in user — updated automatically on each heartbeat, without polling or agent-side scheduling.
- CPU, memory, and disk streamed on 30-second heartbeats fleet-wide
- Online / offline state with last-seen timestamp per device
- Hardware inventory: CPU model, core count, total RAM and disk
- Logged-in user context without opening a session
lusrmgr.msc — in the browser.
Create, rename, disable, and delete local accounts. Assign and remove group memberships. Reset passwords. Everything the local user manager exposes, surfaced as a structured panel without touching the desktop.
- Create users with password policy flags — never expires, user may not change
- Manage Administrators, Remote Desktop Users, and any local group
- Disable accounts immediately without requiring a local session
- Group membership autocomplete from the live group list
See and remove installed software — remotely.
Browse the full installed application inventory on any enrolled endpoint — name, version, publisher, and install date. Trigger silent uninstalls without touching the machine or interrupting the user.
- Full installed software inventory sourced directly from the Windows registry
- Filter and search across hundreds of applications instantly
- Silent uninstall via the application's own registered uninstaller
- No SCCM, no GPO, no remote session required
Windows activation, without the desktop.
Inspect Windows license status across your fleet. View product edition, activation state, license type, and KMS server details — and trigger reactivation remotely without opening a session.
- Full slmgr output surfaced in a structured panel — no command line required
- View product key, activation status, and KMS server per device
- Detect unlicensed or grace-period endpoints across the fleet
- Trigger remote reactivation with a single action
Know about failing drives
before users do.
The agent continuously monitors SMART failure prediction on all physical drives. When a drive signals imminent failure, a warning surfaces in the fleet dashboard immediately — no manual scanning required.
- SMART failure prediction polled on every agent heartbeat
- Warnings surface as visual indicators directly in the device list
- Catch failing drives before data loss or unplanned downtime
- Extensible warning framework — more health checks built on the same system
Kill the process. Not the session.
Live process list with CPU and memory metrics refreshed every three seconds. Terminate any process by PID without taking control of the user's desktop. Filter between active (memory-resident) and all system processes.
- Sortable by name, CPU, or memory — descending by default
- Kill any process by PID with a single click
- Filter active (≥1 MB) vs all processes to cut through system noise
- Pop out to a standalone window for sustained monitoring
Reach the infrastructure behind the endpoint.
Most tools stop at the managed endpoint. Palisade uses it as a pivot — discover the LAN, classify what's on it, and reach the switches, firewalls, NAS units, and appliances that have no agent of their own. No on-site visit, no VPN, no port forwarding.
Discover the LAN
An agent-driven sweep builds a live inventory of every device on the network — managed or not.
Classify hardware
MAC-OUI fingerprinting tags vendor and device type, entirely offline — no lookups leave the network.
Proxy into web UIs
Open a switch, firewall, or NAS admin interface in your browser, tunneled through the agent.
SSH to equipment
A browser shell to anything that speaks SSH — routers, hypervisors, Linux hosts.
Telnet legacy gear
Reach the serial-over-IP appliances and ancient switches nothing modern will talk to.
Pivot, don't expose
Everything rides the endpoint's outbound connection — the device behind it is never internet-reachable.
For the times you do need the screen.
Most work never needs a session. For the rest — a locked-out user, a visual bug, an encrypted disk, a forensic question — Palisade ships the heavier instruments too, each one gated and logged.
Remote Desktop
A full WebRTC session when you genuinely need eyes on the screen — it captures the login and lock screens too, with optional local-input lockout.
File Transfer
Direct browser-to-endpoint upload and download over the authenticated relay. No shared drives, no SFTP credentials, no VPN.
BitLocker
Encryption status per volume, in-house recovery-key escrow, and a gated, fully audited reveal when a key is actually needed.
Audit Trails
An append-only, per-network record of every privileged action — who did what, on which device, and when.
Device APIs
Drive any tool programmatically with scoped tokens. Automate enrollment, remediation, and reporting end to end.
Diagnostics
Pull on-demand log, process, and system bundles from any endpoint for fast triage — without opening a session.
Solutions, not a list of buttons.
The point of a unified workspace is that real jobs stop being a tab-switching scavenger hunt. A few that take minutes instead of a site visit:
Stage a new machine
- 1Create the local account
- 2Clone printers from a peer
- 3Deploy machine certificates
- 4Apply the firewall profile
Investigate a Defender alert
- 1Open Event Viewer, filter Security
- 2Review Defender threat history
- 3Inspect the registry run keys
- 4Kill the offending process
Reach a firewall or NAS
- 1Discover it on the LAN
- 2Open its web UI via Device Proxy
- 3Or SSH straight into the box
- 4All through the agent
The platform underneath the tools.
Network Map & Discovery
An agent-driven LAN sweep builds a live, drag-arrangeable map of every device on the network — managed or not — with fully offline MAC-OUI vendor and device-type classification.
Real-Time System Telemetry
CPU, RAM, and disk utilisation streamed fleet-wide on every heartbeat. Spot resource pressure before it becomes an incident — without opening a single session.
Device Inventory
Every enrolled endpoint reports hostname, OS build, CPU model, core count, RAM, disk capacity, architecture, public and LAN IP, and logged-in user — updated automatically.
Remote Agent Lifecycle
Push silent agent upgrades and trigger remote uninstalls from the dashboard. Decommission a device in one click — agent uninstalls itself and the record is removed.
Multi-Tenant Isolation
Devices are scoped to networks inside organisations. Each tenant is fully isolated — separate credential stores, device lists, and audit trails. Host multiple clients from one instance.
Zero Inbound Attack Surface
The agent dials out over an authenticated WebSocket. No open RDP ports, no VPN concentrator, no inbound rules. Works from behind CGNAT or any restrictive network policy.
Scripts & Automation
Save and run PowerShell against one device or the whole fleet, with a shared script library — no GPO, no SCCM, and no logon session required.
Windows Domain Awareness
Detects domain membership and domain-controller roles per device, surfacing a dedicated domain view for the endpoints that have one — joined or standalone, at a glance.
SMART Drive Health
Continuous SMART failure prediction monitoring on all physical drives. Warning indicators surface in the fleet dashboard the moment a drive signals imminent failure — before data loss occurs.
No inbound ports. No VPN.
No shared credentials.
The agent initiates a persistent outbound WebSocket connection to the Palisade relay. Your firewall never sees inbound traffic from the platform. The endpoint is not reachable directly from the public internet at any point during operation.
- Agent connects outbound — works behind CGNAT and strict corporate firewalls
- Every command is authenticated at the relay before forwarding
- TLS encrypted in transit end-to-end
- No shared admin credentials distributed to operators
Built to be trusted with SYSTEM-level access.
Palisade grants real administrative control, so the platform is engineered to match it — multi-factor auth, granular role-based permissions, encrypted secrets, and strict per-tenant isolation, with every privileged action gated and logged.
MFA + hashed sessions
TOTP two-factor; session tokens stored only as SHA-256 digests, with server-side expiry and step-up re-auth for sensitive actions.
Granular RBAC
Per-capability permissions per role, plus a per-message allowlist on the agent channel — one tool's access never becomes another's.
Encrypted at rest
AES-256-GCM envelope encryption with domain-separated keys; bcrypt passwords; optional Vault / KMS transit.
Per-tenant isolation
Every device, credential, and audit record is scoped to its organization on every operation — cross-tenant reads aren't expressible.
Outbound-only agent
No inbound ports, no VPN, no exposed RDP. The agent dials out over TLS 1.2+; the endpoint is never internet-reachable.
Audit logging
Append-only, per-network action trail with retention — who did what, where, and when.
Stop taking over desktops.
- Call the user and ask them to step away from their machine
- Initiate RDP — their session locks or goes black
- Perform the task while blocking their work entirely
- Repeat for every routine operation across every device
- Slow queues, frustrated users, unnecessary call volume
- Open the device panel — it is already there in the browser
- Run PowerShell, kill a process, or reset a password in the background
- The user's session is never interrupted or taken over
- Same operation across 20 devices — no phone calls, no coordination
- Faster resolution time, zero disruption, consistent operations
Operational in under five minutes.
Create your organization
Sign up and define a network. Palisade provisions an isolated tenant — no infrastructure to configure, no certificates to manage, no VPN concentrator to deploy.
Deploy the agent
Download a pre-configured Windows installer from your dashboard. Run it once per endpoint. The agent enrolls, connects outbound to the relay, and begins reporting. No firewall changes required.
Start administering
Devices appear in your console within seconds. Open a terminal, inspect processes, manage local users, transfer files — without interrupting whoever is at the machine.
Built for operators, not marketing decks.
Managed Service Providers
Serve multiple client sites from a single console. Each organisation is fully isolated. Onboard a new client in minutes — enroll their devices, organise into named networks, administer immediately.
- Per-client tenant isolation
- Single console across all sites
- No per-device VPN
- Consistent tooling across every client
Internal IT Departments
Eliminate the ticket backlog that exists purely because you need desktop access for routine operations. Reset a password, restart a service, clear a print queue — without scheduling time at the user's machine.
- No end-user coordination for routine tasks
- Faster resolution on common incidents
- Fleet-wide telemetry and inventory
- Remote upgrades and decommission
Security & Infrastructure Teams
Investigate, remediate, and harden endpoints without the exposure of an open RDP session or shared admin credentials. Every action runs through a single authenticated control plane.
- No inbound attack surface
- Single authenticated control plane
- Investigate processes and users remotely
- Decommission compromised devices instantly
Stop interrupting users to do your job.
Create an account, deploy an agent, and run your first remote PowerShell command — all in under five minutes.
Create free account