You set the limits. Device by device.
| Device group | Patching | Users | Firewall | Services | Threats | Window |
|---|---|---|---|---|---|---|
| Workstations 42 | AUTO | AUTO | OFF | AUTO | AUTO | 02:00–04:00 |
| Servers 6 | ASK | AUTO | OFF | AUTO | AUTO | Sat 22:00–02:00 |
| Firewall FW-01 1 | MONITOR | OFF | ASK | OFF | AUTO | n/a |
| Core switches 2 | MONITOR | OFF | ASK | OFF | ASK | n/a |
| Backups / NAS 2 | MONITOR | OFF | OFF | MONITOR | MONITOR | n/a |
Design preview. The interface is in development and details will change.
Approve from anywhere.
When a change needs your say-so, Guardian sends the plan, the evidence, the risk and the rollback. Approve or reject in one tap. Unanswered pages go to your backup contact.
Clean up IIS logs and add log rotation
- Why
- D: drive at 91%; full in about 4 days at the current rate
- Evidence
- IIS logs 38 GB (audit #4812); growth 2.1 GB/day
- Risk
- Low · logs older than 30 days only
- Rollback
- Snapshot taken first; restore takes 2 min
Single-use approval tied to these exact settings · expires in 24 h
The shift report you always wanted.
- FAULT FS-02 disk at 91%: cleanup proposed, change #112 waiting for J. Smith
- FIXED VLAN 20 DHCP scope 96% full: range extended after a reservations check, leases verified
- DONE Patched 12 PCs and 2 servers in the 02:00 window. Snapshots first, services re-checked
- SECURITY 340 VPN brute-force attempts blocked (GRD-Blocklist, 30-day expiry)
- SITE VISIT PC-14 link dropped 3× this month. Likely cable or switch port
Design preview. The interface is in development and details will change.
Proof, step by step.
Every decision, credential, snapshot, change and check, with the permission that allowed it. Alter one line and the chain breaks visibly.
| Time | Stage | Action | Device | Result | Hash |
|---|---|---|---|---|---|
09:12:04 | decide | dhcp.set_range | DC01 | allowed · Auto · playbook PB-02 | 7c9d…e1 |
09:12:05 | credential | issue | DC01 | 15-min token, revoked after step | 2b8c…40 |
09:12:06 | snapshot | dhcp.export | DC01 | before-state captured | 91aa…7f |
09:12:09 | change | dhcp.set_range | DC01 | .20–.250 (was .50–.250) | e03f…12 |
09:12:11 | verify | dhcp.get_scope_stats | DC01 | free 31%, passed | 5d27…c9 |
09:12:40 | close | incident #88 | n/a | symptom re-check passed · resolved | a8b1…03 |
Want to shape these screens?
Design partners see every iteration first and tell us what their managers actually need.