Fleet Management
Vigilance on every machine you own, with no server, no agent and no console to log into. One page tells you how the fleet is doing.
What Fleet Management Does
A fleet guard that no one can see is worse than no guard. Vigilance enrols each machine with one line, and each machine writes one signed receipt into a folder you already back up. You read that folder when you want, and you get one page that shows the machines that need a decision.
Three Steps, No Fourth
-
Mint the Fleet Key
Run this once, on the machine you manage from. Name the folder every machine will write into. The team key never goes on a machine you watch.
vigi team init --to /path/to/receipts
-
Enrol Each Machine
Print the join line and ship it through Intune, Jamf, a GPO or your image. Each machine makes its own key and sets its own schedule.
vigi enroll --team <token> --to /path/to/receipts
-
Read the Page
One command turns the receipts folder into one page. Open it from your desk or off a USB stick.
vigi fleet ./receipts --report fleet.html
What the Page Tells You
The page opens with three numbers: how many machines are enrolled, how many reported inside their own window, and how many did not. A machine that goes quiet reads as loud as one that gained a capability. A silent machine is the case an attacker wants.
Machines that check in on schedule fold to a count, so the page lists only what needs a decision. Pass --all to list every machine. Pass --export to write the CSV an audit asks for by name.
Why There Is No Server
Each receipt is a signed line in a folder you own. Your own sync client moves the folder, so nothing of ours runs between you and the machines. No cloud key ever sits on a watched machine.
A machine cannot retire itself or wave away its own bad news. Those two actions carry the team key. That key never goes on a watched machine:
vigi team retire <machine> --to /path/to/receipts vigi team ack <machine> --to /path/to/receipts
Receipts name machines by a short hash and never carry a watched path. Point the folder at append-only storage. Then the report is evidence, not a convenience.
Common Questions
Does It Call Home?
No. The machine writes its receipt to a folder. Your own sync tool moves the folder. Pro opens no network connection at all.
What Do I Install on Each Machine?
One binary. Nothing runs as a service and there is nothing to log into. The schedule uses whatever your computers already use to run jobs.
What Happens When a Machine Goes Quiet?
The page counts it with the machines that missed their window. You see the number, the short hash and the last time it reported.
Can I Use It for an Audit?
Yes. The --export flag writes the CSV most audits ask for by name.
Try It on Two Machines
Free forever, every feature, up to 25 machines. One command.