Patch Management
Patch every server from one screen
Scan, apply and rollback updates across your entire fleet. See which hosts need attention, filter by severity and bulk-apply with confidence. Various Linux distributions and Windows.
Try the demo See how it works →
Vulnerability Intelligence
Know your vulnerabilities before attackers do
Correlate CVEs against every installed package across your fleet. Severity scoring, affected host counts and fix-available status, all in one view. Powered by OSV.dev.
Learn more
Package Catalog
440,000+ packages. Find any of them instantly.
Browse and search every package available across all your configured repositories. Filter by OS family (Debian, RedHat, Windows), find what you need with instant search and add packages directly to State Profiles to define what should be installed across your fleet.
Try the demo
Compliance & Reporting
Compliance reports that write themselves
SCAP scanning with CIS, STIG, PCI-DSS and HIPAA benchmarks. Compliance trending over time, security posture at a glance and exportable snapshots for auditors.
Try the demo
SCAP Remediation
Find a compliance failure. Fix it in one click.
SCAP scans tell you what failed. OpsFabric tells you how to fix it and does it for you. Failed CIS rules are matched to ready-made remediation directives. Select findings, add fixes to a state profile and enforce across your fleet. For rules without automation, you get the exact shell commands and guidance from the benchmark.
Try the demo Beyond auditing: manage, don't just observe →
State Assignments
Define what applies where. Version every change.
Target State Profiles to all hosts, specific groups, individual hosts, or compound filters like OS family, hostname patterns, tags and environment. Execute at any level. Every change to the assignment document is versioned with detailed diffs showing exactly what changed and who changed it.
See the platform
Fleet Visibility & Management
See everything. Manage everything.
OS versions, installed packages, open ports, running services, user accounts, firewall rules, cron jobs. Not just collected and searchable, but editable. Add users, toggle services, update firewall rules, manage cron jobs. Infrastructure as data means read and write.
See the platform What is infrastructure as data? →
Fleet Search
Search everything. Filter by anything.
Find hosts by OS, package, open port, CVE, firewall rule, service status, user account, SCAP result, or any combination. Stack filters across every data domain and get instant results across your entire fleet.
Try the demo
Job Orchestration
Schedule, approve and track every change
Patch windows, dry-run previews, approval gates and full audit trails. Every job is logged with who ran it, when and what changed. No more mystery patches.
Learn more
Security Management
Audit and manage firewalls, users and services fleet-wide
View and manage iptables rules, open ports, user accounts and cron jobs across every host. Spot misconfigurations, then fix them directly from the platform. No SSH required.
See the platform Why manage, not just audit? →
Remote Execution
Run commands on any host. See results in real time.
Select one or more hosts across any gateway, type a command and watch results stream back per host. Save frequently used commands as reusable snippets. Dangerous commands trigger a confirmation prompt. Every execution is logged with who ran it, when, on which hosts and the full output.
Try the demo
Install Profiles
New hosts get the right config from day one
Pre-configure the onboarding experience for new hosts. Define an Install Profile with environment, tags and group assignments, then use it when registering new minions. New hosts automatically join the right groups and inherit the correct policies.
Try the demo