fleet actions

Fix what monitoring finds, at fleet scale, with controls.

Monitor tells you a camera is down or tampered with. Manage acts on it, and on the firmware, credentials, and certificates that quietly age a fleet: approved, staged, verified, and rolled back if it fails.

the framework

Every action runs the same path.

There is no separate, faster path for urgent changes. A firmware push and a credential rotation move through the same gates, in the same order, every time.

Requested and approved

Actions run against named devices, for a named reason, and a different person approves. Nobody approves their own request.

Canary first

Every action proves itself against a small batch before it touches the fleet.

Staged waves, health verified

Rollout proceeds in waves with health checks between them. A wave that fails rolls back automatically before anything spreads.

Evidence recorded

The request, the approval, and every outcome land in the audit record. Nothing runs off the books.

what it acts on

Three places automation earns its keep.

Manage runs the framework against the three things that quietly age a fleet: firmware, credentials, and certificates.

firmware

Push and rollback

Fleet-wide firmware, moved through canary and staged waves, rolled back automatically if a wave fails.

credentials

Password and credential rotation

Rotation that never breaks monitoring. Secrets live in a vault and never appear in logs.

certificates

Certificate lifecycle

Inventory, expiry monitoring, and rotation, so certificates renew before they lapse rather than being found after.

identity and access

Every actor is a named, accountable person.

Account lifecycle and emergency access run through the same request-and-approve path as any other action, with the same evidence trail. Approval policy is configurable per company, so an integrator can match the bar each customer sets.

lifecycle

Account lifecycle

Accounts are provisioned and deprovisioned as approved actions, not side channels outside the framework.

emergency access

Break-glass credential access

Emergency access when it is genuinely needed, still approved, still recorded.

beyond actions

PSA integration and dashboards round out Manage.

Full bi-directional PSA integration keeps tickets in sync in both directions, and custom dashboards let an integrator build the view its own team actually needs.

see it running

Watch the action framework work.

The demo walks a staged rollout end to end, including the evidence it leaves behind.