Single agent, all modules
One lightweight agent covers DLP, patch, antivirus/EDR, inventory, remote support and device control.
Our platform
IOT SecureSpace
One lightweight agent for the whole endpoint job — subscribe only to the modules each site needs, and see every device from a single console.
Modular, per-site licensing
Subscribe only to what a site needs — billed per module, per seat, activated instantly.
AD & Microsoft Entra ID ready
SSO, group-to-role mapping and device/OU sync with your existing identity provider.
Enterprise HA core
Clustered backend (Patroni, Redis, OpenSearch) built for 24×7 mission-critical operation.
SecureSpace Modules
One platform, every endpoint capability
Inventory & Asset
Hardware, software, network and warranty visibility, per site.
- TPM and Secure Boot checks per device
- Warranty expiry alerts
Remote Support
Outbound-only remote command, file transfer and screen view.
- Explicit user consent every session
- Full audit trail of every action
Data Loss Prevention
Thai-language DLP with fingerprinting and exact data matching.
- Detects Thai ID numbers and PDPA-relevant personal data
- Cross-channel risk correlation — USB, web, email
Patch & Driver Management
Managed patching for operating systems, applications and drivers.
- Patch catalog with approval rings
- Staged rollout with rollback
Antivirus / EDR
Central Microsoft Defender management with threat isolation.
- Anti-tamper protection for the agent
- Immediate host isolation on detection
Device, App & Web Control
Decide what plugs in, what runs and what can be reached.
- Policy-based USB and peripheral control
- Application whitelisting and web filtering
Architecture
Designed to be safe, and to stay up
1
Endpoints
A single Windows agent that only dials out — no inbound firewall ports to open.
DLPPatchAV/EDRInventoryRemoteControl
2
Encrypted channel
Encrypted transport, authenticated against your existing identity provider, with every command that reaches a device recorded.
SSOAD / Entra IDAudit log
3
Clustered core
Patroni for database high availability, Redis for queueing and cache, OpenSearch for search and analytics — so a single node failure is not an outage.
PatroniRedisOpenSearch
Licensing
Pay for what each site actually uses
| Module | Best for | Billing unit |
|---|---|---|
| Inventory & Asset | Anyone who needs to know what they own | Per seat / month |
| Patch & Driver | Teams with a patch SLA to meet | Per seat / month |
| Antivirus / EDR | Organisations already on Microsoft Defender | Per seat / month |
| Data Loss Prevention | PDPA-regulated data handling | Per seat / month |
| Remote Support | Helpdesks covering many branches | Per technician / month |
| Device, App & Web Control | Controlled zones — labs, production lines | Per seat / month |
Pricing depends on seat count and number of sites — contact us for a quote matched to your estate.
Try it on your own estate
We will run a pilot on a small group of machines so you can see the real posture from the console yourself.