TvRMM
Modern endpoint management for teams that want hosted SaaS, customer-owned infrastructure, or both.
Inventory endpoints, patch with confidence, run scripts, open secure terminal sessions, coordinate reboots, and monitor Proxmox VE or Unraid guests from one control plane.
Hosted SaaS
Single-tenant
mTLS agents
Role-scoped access
Fast hosted startUse TvRMM as a managed SaaS service when you do not want to run infrastructure.
Customer-owned optionDeploy the appliance into your tenant or private environment when isolation matters.
Same product modelHosted and single-tenant paths share the same agent, portal workflows, and security posture.
Deployment Options
Choose hosted convenience or infrastructure ownership.
TvRMM is built to meet teams where they are: start with hosted multi-tenant SaaS, deploy single-tenant for stricter boundaries, or use both across different environments.
Hosted multi-tenant SaaS
vanRoojen runs the control plane so your team can focus on endpoints, patching, and operations instead of maintaining the RMM server.
- No infrastructure to provision or patch
- Tenant isolation and role-scoped access
- Automatic platform updates and maintenance
- Best for teams that want a fast GA path
Explore hosted TvRMM
OR
Single-tenant customer-owned
Run TvRMM in infrastructure you control with local database ownership, customer-held trust roots, and tenant-local package caching.
- Deploy into Azure or private VM environments
- Keep PostgreSQL, PKI, and secrets in your boundary
- Use mTLS agents without inbound endpoint ports
- Best for regulated, isolated, or air-gapped-adjacent needs
Review single-tenant deployment
Platforms
One control plane for ordinary endpoints and homelab infrastructure.
Workflow
From discovery to day-two operations.
1Discover and inventoryAuto-discover OS, hardware, patch state, runtime metadata, guests, and software posture.
2Patch with confidenceScan, approve, schedule, deploy, and verify patch work with policy context.
3Run scriptsExecute curated PowerShell, Bash, or custom scripts without exposing endpoint ports.
4Open terminal relayUse browser-based terminal sessions over the agent connection.
5Reboot and remediateCoordinate prompts, forced reboots, double-reboot flows, and post-check scans.
Security
Secure by design, whether hosted or single-tenant.
mTLS agents
Agents use certificate-based identity and trust bundles for heartbeat, audit, command polling, and terminal relay.
Least privilege
Viewer, operator, admin, owner, and platform-admin controls separate read-only visibility from action authority.
Outbound endpoints
Managed endpoints connect outward to TvRMM; desktops, servers, guests, and hosts do not need inbound ports.
Deletion cleanup
Soft-delete queues uninstall, revokes client certificates, regenerates CRLs, and hides deleted rows from operator views.
vanRoojen Ecosystem
Adjacent tools, linked where they naturally fit.
These are related because they solve neighboring operational problems, not because every product page needs a link farm.