Administer Windows endpoints
without the desktop session.
Palisade is a browser-native control plane for Windows infrastructure. Run PowerShell, manage processes, administer local users, and transfer files — all from a browser tab, without an RDP session, VPN, or any open inbound ports on the endpoint.
A real PTY, not a command runner.
The terminal runs over ConPTY — the same allocation Windows uses natively. Colour output, tab completion, progress bars, and interactive programs all work as expected. It is not a web terminal stub that pipes strings into cmd.
- Full PowerShell 5 and cmd sessions with interactive prompt
- ConPTY allocation preserves ANSI colour and cursor control
- Session persists across browser navigation — reconnects on page refresh
- Pop out to a dedicated window for sustained administration sessions
Your entire fleet, at a glance.
Every enrolled endpoint reports its hostname, OS build, CPU, RAM, disk utilisation, public and LAN IP, and the currently logged-in user — updated automatically on each heartbeat, without polling or agent-side scheduling.
- CPU, memory, and disk streamed on 30-second heartbeats fleet-wide
- Online / offline state with last-seen timestamp per device
- Hardware inventory: CPU model, core count, total RAM and disk
- Logged-in user context without opening a session
lusrmgr.msc — in the browser.
Create, rename, disable, and delete local accounts. Assign and remove group memberships. Reset passwords. Everything the local user manager exposes, surfaced as a structured panel without touching the desktop.
- Create users with password policy flags — never expires, user may not change
- Manage Administrators, Remote Desktop Users, and any local group
- Disable accounts immediately without requiring a local session
- Group membership autocomplete from the live group list
See and remove installed software — remotely.
Browse the full installed application inventory on any enrolled endpoint — name, version, publisher, and install date. Trigger silent uninstalls without touching the machine or interrupting the user.
- Full installed software inventory sourced directly from the Windows registry
- Filter and search across hundreds of applications instantly
- Silent uninstall via the application's own registered uninstaller
- No SCCM, no GPO, no remote session required
Windows activation, without the desktop.
Inspect Windows license status across your fleet. View product edition, activation state, license type, and KMS server details — and trigger reactivation remotely without opening a session.
- Full slmgr output surfaced in a structured panel — no command line required
- View product key, activation status, and KMS server per device
- Detect unlicensed or grace-period endpoints across the fleet
- Trigger remote reactivation with a single action
Know about failing drives
before users do.
The agent continuously monitors SMART failure prediction on all physical drives. When a drive signals imminent failure, a warning surfaces in the fleet dashboard immediately — no manual scanning required.
- SMART failure prediction polled on every agent heartbeat
- Warnings surface as visual indicators directly in the device list
- Catch failing drives before data loss or unplanned downtime
- Extensible warning framework — more health checks built on the same system
Kill the process. Not the session.
Live process list with CPU and memory metrics refreshed every three seconds. Terminate any process by PID without taking control of the user's desktop. Filter between active (memory-resident) and all system processes.
- Sortable by name, CPU, or memory — descending by default
- Kill any process by PID with a single click
- Filter active (≥1 MB) vs all processes to cut through system noise
- Pop out to a standalone window for sustained monitoring
More administration surface.
File System Access
Full directory tree browsing, upload, and download to any path on the remote filesystem. No shared drives, no SFTP credentials, no VPN — direct browser-to-endpoint transfer over the authenticated relay.
Real-Time System Telemetry
CPU, RAM, and disk utilisation streamed fleet-wide on every heartbeat. Spot resource pressure before it becomes an incident — without opening a single session.
Device Inventory
Every enrolled endpoint reports hostname, OS build, CPU model, core count, RAM, disk capacity, architecture, public and LAN IP, and logged-in user — updated automatically.
Remote Agent Lifecycle
Push silent agent upgrades and trigger remote uninstalls from the dashboard. Decommission a device in one click — agent uninstalls itself and the record is removed.
Multi-Tenant Isolation
Devices are scoped to networks inside organisations. Each tenant is fully isolated — separate credential stores, device lists, and audit trails. Host multiple clients from one instance.
Zero Inbound Attack Surface
The agent dials out over an authenticated WebSocket. No open RDP ports, no VPN concentrator, no inbound rules. Works from behind CGNAT or any restrictive network policy.
Application Management
Browse the full installed software inventory on any endpoint. Filter by name or publisher, then trigger a silent remote uninstall — no session, no SCCM, no GPO required.
Windows License Management
Inspect Windows activation status, product edition, license type, and KMS server details per device. Detect unlicensed endpoints and trigger remote reactivation without opening a session.
SMART Drive Health
Continuous SMART failure prediction monitoring on all physical drives. Warning indicators surface in the fleet dashboard the moment a drive signals imminent failure — before data loss occurs.
No inbound ports. No VPN.
No shared credentials.
The agent initiates a persistent outbound WebSocket connection to the Palisade relay. Your firewall never sees inbound traffic from the platform. The endpoint is not reachable directly from the public internet at any point during operation.
- Agent connects outbound — works behind CGNAT and strict corporate firewalls
- Every command is authenticated at the relay before forwarding
- TLS encrypted in transit end-to-end
- No shared admin credentials distributed to operators
The difference in practice.
- Call the user and ask them to step away from their machine
- Initiate RDP — their session locks or goes black
- Perform the task while blocking their work entirely
- Repeat for every routine operation across every device
- Slow queues, frustrated users, unnecessary call volume
- Open the device panel — it is already there in the browser
- Run PowerShell, kill a process, or reset a password in the background
- The user's session is never interrupted or taken over
- Same operation across 20 devices — no phone calls, no coordination
- Faster resolution time, zero disruption, consistent operations
Operational in under five minutes.
Create your organization
Sign up and define a network. Palisade provisions an isolated tenant — no infrastructure to configure, no certificates to manage, no VPN concentrator to deploy.
Deploy the agent
Download a pre-configured Windows installer from your dashboard. Run it once per endpoint. The agent enrolls, connects outbound to the relay, and begins reporting. No firewall changes required.
Start administering
Devices appear in your console within seconds. Open a terminal, inspect processes, manage local users, transfer files — without interrupting whoever is at the machine.
Built for operators, not marketing decks.
Managed Service Providers
Serve multiple client sites from a single console. Each organisation is fully isolated. Onboard a new client in minutes — enroll their devices, organise into named networks, administer immediately.
- Per-client tenant isolation
- Single console across all sites
- No per-device VPN
- Consistent tooling across every client
Internal IT Departments
Eliminate the ticket backlog that exists purely because you need desktop access for routine operations. Reset a password, restart a service, clear a print queue — without scheduling time at the user's machine.
- No end-user coordination for routine tasks
- Faster resolution on common incidents
- Fleet-wide telemetry and inventory
- Remote upgrades and decommission
Security & Infrastructure Teams
Investigate, remediate, and harden endpoints without the exposure of an open RDP session or shared admin credentials. Every action runs through a single authenticated control plane.
- No inbound attack surface
- Single authenticated control plane
- Investigate processes and users remotely
- Decommission compromised devices instantly
Stop interrupting users to do your job.
Create an account, deploy an agent, and run your first remote PowerShell command — all in under five minutes.
Create free account