Live across your whole Windows fleet Installable mobile app — manage endpoints on the go

Every endpoint, seen and under control.

NodeWatch is the RMM platform that deploys software, patches Windows, monitors fleet health and hardens every machine — BitLocker, USB control and software whitelisting — from one console or your phone.

Try the interactive demo Book a live demo

No signup required · Explore it live · No commitment

NodeWatch — Fleet overview

Online

Patched

Encrypted

WS-FIN-014 deploying

WS-ENG-221 patching

LT-SALES-07 healthy

WS-OPS-103 offline

Built by IT engineers running real Windows fleets — agent, server and console, end to end.

Heartbeat interval — true live status

Endpoint control capabilities

Inventory tiers, network-friendly

Windows endpoint coverage

The cost of blind spots

Unmanaged endpoints are where risk hides

Every laptop you cannot see is an unpatched CVE, an unencrypted disk, or an app nobody approved. Manual management does not scale — and the gaps are exactly where incidents start.

Security gaps

Missing patches and disabled encryption go unnoticed until they are exploited.

Manual patching

Chasing updates machine-by-machine does not scale past a handful of devices.

Shadow software

Unapproved apps, risky extensions and stray USB drives you never see.

Platform capabilities

One agent. Total control of the endpoint.

Nine capabilities that turn unmanaged Windows machines into a governed, hardened fleet.

Software delivery

Deploy software to the whole fleet in one push

Script it or build it visually — then roll it out and watch every install land.

Package applications with the visual package builder or ship a raw script, assign to devices, and track each install through queued, downloading, installing and success in real time.

Visual package builder (.nwpack) or custom scripts
Per-device assignments with live status
Automatic detection rules and redeploy on failure

7-Zip 23.01 success

Chrome Enterprise installing

Custom script queued

Monitoring

Live health across every endpoint

Heartbeats every 30 seconds keep the whole fleet status honest.

Agents report in on a 30-second heartbeat with rolled-up device health scores, so you see what is online, degraded or offline before users do.

Per-device health scores and metrics
30-second heartbeat for true live status
Online / offline / degraded fleet view

CPU / memory healthy

Disk SMART healthy

Last heartbeat 12s ago

Patch management

Close the patch gap — automatically or on your terms

Scan, surface and install Windows updates across the fleet.

NodeWatch scans Windows Update on every endpoint and reports missing patches centrally. Push installs on demand or let automation handle it, so unpatched machines stop being your weakest link.

Fleet-wide Windows update visibility
Manual push or automation-driven installs
Per-device update history

KB5039212 installed

KB5040442 pending

Security rollup missing

Inventory

Know every machine, down to the driver

Hardware, drivers, installed software and BitLocker — collected automatically.

Tiered inventory keeps hardware, drivers, installed software and system settings current without hammering the network, and surfaces BitLocker encryption status and recovery keys so nothing is a mystery.

Hardware, drivers and installed software
BitLocker status and recovery-key retrieval
Tiered collection (light / medium / heavy) to stay efficient

Drivers 142 tracked

BitLocker C: encrypted

Recovery key escrowed

Visibility

See who is actually at the machine

Current-user presence reported with every check-in.

Each endpoint reports the logged-in user alongside its heartbeat, so you know who is on which device before you push a change or chase an alert.

Logged-in user surfaced per device
Updated on every heartbeat
Context before you act on a machine

Logged-in user AFRIT\jdoe

Session active

Last seen just now

Browser oversight

Browsing history and extension visibility

See where machines go and what extensions they run.

NodeWatch collects browser history and the full list of installed browser extensions per device — the blind spot where shadow tools and risky add-ons usually hide.

Per-device browsing history
Installed browser-extension inventory
Spot risky or unapproved add-ons

Chrome history 1,204 entries

Extension: AdBlock approved

Unknown add-on flagged

Data protection

Block USB drives — whitelist only what you trust

Default-deny removable storage with an explicit allow list.

Stop data walking out the door. NodeWatch logs USB device events and enforces a whitelist policy, so only approved devices connect and everything else is blocked.

USB device event logging
Whitelist-based allow policy
Block unknown removable storage by default

Kingston DT blocked

YubiKey 5 whitelisted

Unknown device blocked

Software control

Whitelist, blacklist and remove shadow software

Approve what belongs — flag and remove what does not.

Maintain approved and unauthorized software lists, detect shadow IT across the fleet, and let automation remove unapproved applications so your software estate matches policy instead of guesswork.

Approved / unauthorized software lists
Shadow-IT detection across the fleet
Automation-driven removal of unapproved apps

Approved apps 38 allowed

uTorrent removed

Shadow IT 2 detected

Installable mobile app · PWA NodeWatch Mobile

Your entire fleet, in your pocket.

On the go. On call. Still in control.

Install NodeWatch on your phone like a native app — no App Store, no sideloading. Check fleet health, chase alerts, review USB blocks and agent status from the parking lot, the airport, or the couch.

Same LDAP login. Same live data. Built for engineers who cannot stay chained to a desk when endpoints misbehave.

Install in seconds Add to Home Screen on iPhone or Android — launches full-screen, no browser chrome.
Live, not cached Real-time fleet data over your secure session — heartbeats, alerts and command queue.
Your auth, your fleet Sign in with the same credentials as the desktop console. Role-based access applies.
Works anywhere Phone signal, hotel Wi‑Fi, tethering — manage endpoints wherever you have connectivity.

Install in three taps

1
Open NodeWatch Sign in to your console from your phone browser — same URL your team already uses.
2
Add to Home Screen Safari or Chrome → Share → “Add to Home Screen”. NodeWatch gets its own icon.
3
Launch like an app Open from your home screen — full-screen, portrait-optimised, ready for on-call.

iPhone & iPad Android No app store required

Explore the interactive demo

Included with every NodeWatch deployment · PWA · iOS & Android

09:41

NodeWatch

Fleet dashboard

Online18

Alerts3

Health84

KB5040442 missing on 4 PCs

USB blocked — WS-FIN-014

Chrome deploy completed

BitLocker OK · 16 encrypted

Live · 30s heartbeat

Mobile views — dashboard to activity

Extra licenses for mobile access

Same heartbeat data as desktop

Everything critical — thumb-friendly

Five focused views. Zero clutter. Built for the moment you get the alert.

Dashboard

Fleet KPIs, risk score, live alerts and command-queue snapshot at a glance.

Assets

Search the fleet, open any device, see status, health and last check-in.

USB

Recent block events and removable-storage policy — spot data exfiltration fast.

Agents

Online, offline and outdated agents with heartbeat timestamps.

Activity

Command history and audit trail when you need to know what ran and when.

How it works

From bare endpoint to fully governed in four steps

Deploy the agent

Install the lightweight Windows service. It registers itself and checks in automatically.

Monitor the fleet

Heartbeats, health scores and tiered inventory flow into one console within minutes.

Control & harden

Patch, deploy software, lock down USB and enforce software policy from one place.

Report & automate

Automation and playbooks keep policy enforced and the fleet compliant on autopilot.

Why NodeWatch

One console instead of scripts, spreadsheets and hope

Capability	Manual / legacy tooling	NodeWatch
Patch visibility	Spreadsheets, per-machine checks	Live fleet-wide update status
Software deployment	Hand-run installers, RDP sessions	One push, tracked to success
Disk encryption	Unknown / unmanaged	BitLocker status + key escrow
USB / removable storage	Wide open	Default-deny with whitelist
Shadow software	Discovered after an incident	Detected and removed by policy
User presence	Phone the user	Current user per device
On-call / mobile access	VPN + laptop only	Installable PWA — fleet in your pocket

What teams say

Trusted by the people who keep the fleet running

We went from chasing Windows updates across 300 machines on spreadsheets to seeing the whole fleet's patch status on one screen. NodeWatch closed gaps we didn't even know we had.

Thabo Mokoena IT Manager, Highveld Manufacturing

Pushing software used to mean late nights and RDP sessions. Now I build a package once, assign it, and watch every install land. It changed how my team works.

Renita Naicker Systems Engineer, Coastal Logistics

BitLocker visibility alone justified the rollout. Knowing every disk is encrypted and the recovery keys are escrowed took a real compliance headache off my plate.

Johan van der Merwe Head of IT, Karoo Financial Services

The 30-second heartbeat means we find out a machine is in trouble before the user phones us. We're fixing things proactively for the first time.

Aisha Patel IT Director, Meridian Health Group

We default-deny USB storage now and whitelist only what we trust. Data isn't walking out the door anymore, and setting it up took an afternoon.

Sipho Dlamini Infrastructure Lead, Summit Mining Solutions

As an MSP, one console across all our clients' endpoints is everything. Onboarding a new client used to take days — NodeWatch makes it hours.

Lara Bezuidenhout Owner, NorthBridge IT

I can finally answer "what's on that machine?" instantly — hardware, drivers, installed software, all current. No more sending someone to a desk to check.

Daniel Oosthuizen Network Administrator, Cape Retail Group

It flagged a dozen unapproved apps in the first week and removed them by policy. Our software estate finally matches what we actually approved.

Nomvula Khumalo IT Operations Manager, Gauteng Education Trust

We evaluated three RMM tools. NodeWatch was the only one that didn't make us pay extra per feature to harden the fleet — and the hardening is the point.

Pieter Coetzee CTO, Veld Software

Patch status, encryption, USB policy and software control in one place — that is our endpoint security posture, visible at a glance. Audits are a non-event now.

Fatima Adams Security Officer, Atlas Insurance

Browsing history and extension visibility helped us track down a risky add-on that was slowing machines. We'd never have spotted it otherwise.

Brandon Smith Desktop Support Lead, Riverside Legal

The tiered inventory is clever — it keeps everything current without hammering our network. I didn't expect an RMM to be this considerate of bandwidth.

Keshav Reddy Systems Administrator, Indus Engineering

I run IT for the whole company on my own. NodeWatch is like a second pair of hands that never sleeps — patching and monitoring just happen.

Annelie du Toit IT Coordinator, Boland Wineries

User presence on every device means we know who is at a machine before we touch it. No more "are you using this right now?" phone calls.

Mandla Zulu Service Desk Manager, UrbanConnect Telecoms

Rolling the agent out was painless — install it, it registers itself, and within minutes the fleet was reporting in. Fastest RMM deployment I've done.

Charl Fourie Head of Infrastructure, Drakensberg Group

Only 25 spots left in early access NodeWatch pricing

Plans for every fleet size

Flat monthly pricing in USD. Start small, scale as you grow — no per-endpoint surprises.

Starter

Everything you need to manage a small fleet.

$79 / month

Up to 50 endpoints
All features included
Email alerts
Inventory management
Patch management
Software deployment
BitLocker monitoring
Reporting
LDAP integration

Suitable for

Small businesses
MSP clients with a single site

Try the interactive demo

Frequently asked questions

Clear answers about what NodeWatch is, who it serves, and how it fits your Windows fleet.

What is NodeWatch?

NodeWatch is a remote monitoring and management (RMM) platform for Windows endpoints. It combines monitoring, patch management, software deployment, asset inventory, BitLocker management, USB control, and software policy enforcement in one console — with an installable mobile PWA for on-the-go fleet management.

Who is NodeWatch for?

NodeWatch is built for internal IT teams, MSPs, and security-conscious organizations that manage Windows laptops, desktops, and servers and need visibility, patching, deployment, and hardening without stitching together multiple tools.

What problems does NodeWatch solve?

NodeWatch solves blind spots in endpoint fleets: unknown patch status, unencrypted disks, unapproved software, USB data exfiltration, manual deployments, and slow incident response. It replaces spreadsheets, RDP sessions, and ad-hoc scripts with a single governed console.

Does NodeWatch include patch management?

Yes. NodeWatch provides fleet-wide Windows patch visibility, missing update detection, and patch deployment tracking so teams can see which machines are compliant without checking each device manually.

Can I manage endpoints from my phone?

Yes. NodeWatch ships an installable Progressive Web App (PWA) for iOS and Android. Add it to your home screen for dashboard, assets, USB events, agents, and activity views using the same secure login as the desktop console.

How is NodeWatch different from Intune or traditional RMM tools?

NodeWatch focuses on Windows endpoint governance with built-in hardening — BitLocker, USB control, software whitelisting, and tiered inventory — without per-feature upsells. It is designed for teams that want monitoring, deployment, and security controls in one lightweight agent and console.

Does NodeWatch integrate with Active Directory or LDAP?

Yes. NodeWatch supports LDAP and Active Directory sync for user authentication, role-based access, and fleet alignment with your existing directory structure.

How is NodeWatch priced?

NodeWatch offers flat monthly USD plans: Starter (up to 50 endpoints), Growth (up to 250), Business (up to 1,000), and Enterprise Cloud for larger deployments. See the pricing page for current tiers.

Get started today Ready when you are

Take control of every endpoint — desk or phone

Deploy the agent, install the mobile app, and run your fleet from anywhere.

Try the interactive demo Book a live demo

No signup required · Explore it live · No commitment