Software management
Software inventory and patching without a heavy endpoint suite
Keepstone shows what is installed on every enrolled PC. If you turn on the management channel for a PC, you can also install, update and remove software and run Windows Update from the hub, with every action signed and logged.
Book a consultationWhat you get
Software inventory
Installed software per machine, refreshed by the agent and visible across the fleet.
Install, update, remove
Install from winget, or from a URL with a SHA-256 checksum that must match before anything runs.
Windows Update and restarts
Search and install updates and schedule a restart, with the result reported back per update.
Signed, fixed actions
Each command is signed by your deployment and the agent knows only a short list of actions. It never runs a free-form script.
Opt-in per PC
Management is off unless you enable it when you install the agent. Without it, the agent only reports.
Admin approval for elevation
When someone needs an admin prompt, the hub notifies admins and one approval launches that single program elevated. Nobody types a password.
Questions, answered
Does Keepstone replace patch management tools?
For small and mid-sized Windows fleets it covers software inventory, installs, updates and Windows Update. We say honestly in the consultation where a larger tool should stay.
Is software installation safe?
Commands are signed, downloads must match a SHA-256 checksum, and every action records who queued it, the result and when it expires.
Is management on by default?
No. The management channel is opt-in for each PC.
Related
IT security
Keepstone keeps remote IT access locked down: approved PCs only, short-lived encrypted tokens, MFA on privileged actions, signed agents and an audit trail of who did what.
IT hub
Keepstone is the IT hub for growing businesses on Microsoft 365: service desk, device fleet, toner, asset custody, analytics and secure remote desktop in one private deployment.
Remote Assist and RDP
Remoat gives IT teams secure remote desktop: browser-based RDP through your own gateway and Remote Assist screen sharing that starts only after the user clicks Allow.
Ready to see if Keepstone fits? Book a consultation.