TvRMM

Modern endpoint management for teams that want hosted SaaS, customer-owned infrastructure, or both.

Inventory endpoints, patch with confidence, run scripts, open secure terminal sessions, coordinate reboots, and monitor Proxmox VE or Unraid guests from one control plane.

Hosted SaaS Single-tenant mTLS agents Role-scoped access
TvRMM dashboard showing endpoint inventory, deployment modes, patch compliance, reboot queue, and mobile status view
Fast hosted startUse TvRMM as a managed SaaS service when you do not want to run infrastructure.
Customer-owned optionDeploy the appliance into your tenant or private environment when isolation matters.
Same product modelHosted and single-tenant paths share the same agent, portal workflows, and security posture.

Deployment Options

Choose hosted convenience or infrastructure ownership.

TvRMM is built to meet teams where they are: start with hosted multi-tenant SaaS, deploy single-tenant for stricter boundaries, or use both across different environments.

Hosted multi-tenant SaaS

vanRoojen runs the control plane so your team can focus on endpoints, patching, and operations instead of maintaining the RMM server.

  • No infrastructure to provision or patch
  • Tenant isolation and role-scoped access
  • Automatic platform updates and maintenance
  • Best for teams that want a fast GA path
Explore hosted TvRMM
OR

Single-tenant customer-owned

Run TvRMM in infrastructure you control with local database ownership, customer-held trust roots, and tenant-local package caching.

  • Deploy into Azure or private VM environments
  • Keep PostgreSQL, PKI, and secrets in your boundary
  • Use mTLS agents without inbound endpoint ports
  • Best for regulated, isolated, or air-gapped-adjacent needs
Review single-tenant deployment

Platforms

One control plane for ordinary endpoints and homelab infrastructure.

Windows

Service-based agent, patch state, reboot prompting, audit snapshots, scripts, and terminal relay.

Linux

Systemd agent, package patching, endpoint relocation, script execution, and outbound-only management.

Proxmox VE

Host inventory, QEMU and LXC guest rows, repository posture, ZFS state, backups, and guest actions.

Unraid

Array, shares, disks, plugins, Docker containers, libvirt VMs, and guest-aware action routing.

Workflow

From discovery to day-two operations.

1Discover and inventory

Auto-discover OS, hardware, patch state, runtime metadata, guests, and software posture.

2Patch with confidence

Scan, approve, schedule, deploy, and verify patch work with policy context.

3Run scripts

Execute curated PowerShell, Bash, or custom scripts without exposing endpoint ports.

4Open terminal relay

Use browser-based terminal sessions over the agent connection.

5Reboot and remediate

Coordinate prompts, forced reboots, double-reboot flows, and post-check scans.

Security

Secure by design, whether hosted or single-tenant.

mTLS agents

Agents use certificate-based identity and trust bundles for heartbeat, audit, command polling, and terminal relay.

Least privilege

Viewer, operator, admin, owner, and platform-admin controls separate read-only visibility from action authority.

Outbound endpoints

Managed endpoints connect outward to TvRMM; desktops, servers, guests, and hosts do not need inbound ports.

Deletion cleanup

Soft-delete queues uninstall, revokes client certificates, regenerates CRLs, and hides deleted rows from operator views.

vanRoojen Ecosystem

Adjacent tools, linked where they naturally fit.

These are related because they solve neighboring operational problems, not because every product page needs a link farm.