Nodara
Nodara is the control plane for every endpoint an organisation owns — a stream held open to each machine, command execution that only runs what was signed, and remote support that waits to be let in.
The premise
A monitoring tool that reports everything reports nothing. Nodara collapses the noise before it reaches a person: alerts are fingerprinted so one failure raises one ticket, thresholds only fire once a breach has held, and scheduled maintenance suppresses the pager while still counting what it silenced.
The instrument
Every endpoint holds an authenticated gRPC stream open and reports on a sixty-second heartbeat. Offline is not inferred from missed beats — the moment the stream drops, the console knows. No silent failures waiting to be discovered by a user.
gRPC · per-device keys
Hardware, disks, services and installed software are swept every six hours and kept per device, so a machine's configuration is something you look up rather than something you go and ask it for.
6h sweep · per-device
Alerts are grouped by root cause and asset, gated on sustained duration, and muted inside maintenance windows. Anything critical left unacknowledged escalates on a deadline — exactly once.
Dedup · escalation SLA
Screen control runs peer-to-peer in the browser over encrypted WebRTC, relayed through TURN when firewalls block a direct path. Where policy requires it, the person at the desk approves before anything is seen.
DTLS-SRTP · consent gate
Policies decide which categories are approved, which are denied, and when installs may run. Active hours are honoured, so a business-critical machine is never rebooted mid-shift. Every device carries a live count of what it is missing, security updates called out separately.
Policy windows · active hours
Ship to a canary ring first, pause, then widen. If failures in any ring pass the budget, the rollout halts on its own and raises a technician rather than continuing into the fleet.
Rings · 20% budget
Agents execute a vetted list and nothing else — scripts on allow-listed interpreters, service restarts, reboots, patch scans. Scripts can run as an unprivileged user, or be switched off entirely.
Allow-list · privilege drop
Settings inherit from tenant to site to group to device, with a precedence order that is written down and tested. Change one and the configuration epoch increments, pushing to every online agent at once.
4 levels · live push
Uptime derived from recorded status history rather than optimistic maths, exported as PDF, HTML or CSV under your own logo and colours, on a schedule that lands in an inbox without anyone remembering.
White-label · scheduled
Who holds it
Service providers
Run hundreds of client estates from a single console with hard logical isolation, then prove the value at the end of the month.
Enterprise IT
For internal teams answerable to a change board — deterministic policy, maintenance windows, and an approval gate in front of anything risky.
Individuals & small teams
A home lab, a family's laptops, a studio of a dozen workstations — the same instrument, without the enterprise on top of it.
Underneath
One command enrols a machine. The console has it on screen before the window closes.