Cloud portal
One multi-client control centre for assets, findings, jobs, policies, evidence and reporting.
Platform
What Remedion is—and everything it includes.
The Enterprise Security Operating System: one portal, lightweight agents, gateway reach and governed automation that connect discovery, remediation, protection and compliance into a single operational workflow.
What Remedion is
An enterprise platform that orchestrates resolution.
Remedion is not a scanner bolted onto a ticket queue. It is the operating system for security operations—connecting discovery, decision-making, remediation, endpoint control and compliance in one workflow so teams spend less time stitching tools together.
Lightweight agents
Windows and Linux agents share the same job model—inventory, remediation, controls and telemetry.
Gateway appliances
On-prem relays for locked-down networks: outbound HTTPS only, LAN patch cache, site-local scanning.
Integrations
Bring Qualys, CrowdStrike, Microsoft Defender, Dell iDRAC and Citrix NetScaler into the same operations workflow.
How the platform works
One continuous lifecycle— not disconnected tools.
Capabilities are designed to run as a loop: find what matters, fix it with audit trails, prove it, then keep protecting the estate.
- Discover
- Assess
- Prioritise
- Remediate
- Verify
- Protect
- Comply
- Repeat
Discover
Assets, exposures, certificates, EOL signals and threat context across every site.
Remediate
Auditable jobs, patch policy, RemediAI chat, AI-assisted plans and scripted fixes with review.
Protect
Application and USB control, Microsoft Defender, disk encryption with key escrow, hardening and SSPR.
Operate
Multi-client estates, gateways, recorded remote control, live shell, productivity and governed automation.
Comply
Continuous evidence and Cyber Essentials Plus readiness—without an annual scramble.
What the platform includes
Modules, agents and infrastructure— in one place.
Everything below is part of Remedion. Open a module for detail, or start with Windows, Linux, gateway and integrations if you are mapping coverage to your estate.
Remediation & compliance
Security controls
- Application control & USBBlock shadow installs, USB storage, and deploy ScreenSaver policy.
- Microsoft Defender consoleOperate Windows Defender from the Security add-on.
- Disk encryption & keysBitLocker/LUKS status with recovery-key escrow.
- End-user auth & SSPRVerify callers and reset passwords securely.
Intelligence & AI
Remote operations
Endpoints & reach
Windows, Linux and locked-down sites— one estate view.
Agents share the portal and job model. Gateways extend coverage where inbound access is impossible. Integrations keep your existing security investments in the same workflow.
Windows agent
Updates, app control, BitLocker, recorded remote control, live PowerShell and Defender.
Windows detailsLinux agent
Apt patching, Vuls, certificates, hardening and LUKS visibility.
Linux detailsGateway appliances
On-prem relays, LAN patch cache and network scanning for restricted sites.
Gateway moduleIntegrations
Qualys, CrowdStrike and agent-native signals in one remediation queue.
Integration partnersAutomation included
AI-assisted remediation with enterprise governance.
Approval workflows, canary deployment, audit trails and rollback—so automation reduces workload without creating operational risk. RemediAI adds scoped troubleshooting chat with the same hard safeguards.
Capability catalogue
Every capability in the Remedion platform.
A complete view of what is included—open any item for module detail. Cyber Essentials Plus has its own dedicated page when you need assessment-focused depth.
Automated vulnerability remediation
Close findings with repeatable jobs instead of one-off manual fixes.
CE Plus readiness tracking
Monitor posture against requirements with clear, ongoing visibility.
Application control & USB lockdown
Block unapproved installs, lock down USB storage, maintain allowlists, and route software or device requests through IT approval.
Disk encryption & key management
BitLocker and LUKS status, policy-driven enablement, and encrypted recovery-key escrow with audited access.
iDRAC & NetScaler management
Inventory Dell BMCs and Citrix ADCs, open HTML5/SSH consoles, and rotate escrowed admin passwords LAPS-style from Base.
Infrastructure monitoring
Opt-in per-asset dashboards for servers, SQL Server performance, iDRAC health, CPU, memory, disk, and IOPS—with 30-day history.
Recorded remote control
Full Windows desktop sessions with operator identity and optional recording, plus iDRAC console through the same portal.
Live PowerShell & SSH
Real-time commands into Windows (PowerShell) and Linux/NetScaler shells over outbound HTTPS—no inbound RDP, WinRM, or SSH holes.
Windows location tracker
Last-known location from Windows Location Services via the interactive helper—lost laptops and site audits, not silent tracking.
Microsoft Defender console
Operate Windows Defender protection, signatures, and threats from the Security add-on—alongside CrowdStrike when you use Falcon.
ScreenSaver & lock-screen policy
Fleet ScreenSaver timeout, secure lock, and optional branded images—group-assigned under Application Control.
RemediAI troubleshooting chat
Scoped ops assistant for failed jobs, logs, and product guidance. Hard denies in code; scripts stay drafts until you canary and approve.
End-user auth & SSPR
Verify helpdesk callers and reset AD passwords with a security model where secrets never ride loosely in job payloads.
Certificate tracking & expiry alerts
Inventory TLS certs on servers, flag expiring certificates, and open portal tasks before outages hit production.
Threat Intel daily & outlook
AI daily/weekly threat briefs and a 0–3 month security outlook from NVD and CISA KEV, matched to your estate.
Asset EOL outlook
End-of-life and end-of-support signals for OS, network platforms, and hardware—matched from Remedion asset inventory.
Gateway appliances
On-prem relays for locked-down firewalls—outbound HTTPS only, LAN patch cache, per-site deployment.
Qualys & CrowdStrike integrations
Import Qualys detections as a primary vuln source and surface Falcon AV inventory and alerts per asset.
Built-in network scanning
Run GVM/OpenVAS from the gateway and import findings without a separate scanner stack.
Asset discovery
Maintain an accurate view of servers and workstations across clients.
Asset productivity
Work-day timelines, top apps and browser focus from the same agent—no extra analytics SKU.
AI event log action plans
Explain Windows incidents, generate investigation steps, and build remediation plans with safe PowerShell checks.
AI script generator
Turn natural-language requests into draft PowerShell or bash with ScriptingAI—review, approve, then deploy across the fleet. Included in Base.
Policy enforcement
Apply patch and security policies consistently across asset groups.
Windows update visibility
Understand missing updates and remediation progress across the estate.
Security profile management
Define and apply hardened configurations with controlled rollout.
Remediation scripts
Package and deploy standardised fixes with audit trails—manual authoring or ScriptingAI drafts.
Evidence and reporting
Support assessments with clear records of actions taken.
MSP and client management
Operate at scale with multi-client structure and scoped access.
See the full platform in a live demo
Walk through the portal, agents, modules and workflows mapped to your estate.