One platform, every capability

Every IT capability you need, on one platform.

AdminSystem ships ITSM, RMM, asset management, documentation, remote support, billing, and compliance out of the box — sharing one database, one identity, and one bill.

01

Ticketing & service desk

A modern service desk that doesn't feel like 2010 SharePoint.

Tickets are the spine of every IT shop, so we built ours first. Multi-channel intake routes everything — email, web form, public intake forms, portal, alerts, automations — into one queue with SLA timers, parent/child relationships, AI auto-classification, and saved views. Two-way email threading detects subject tokens and In-Reply-To headers so contacts can just hit Reply.

/tickets/dispatch/kb/f
›Multi-channel intake: email, portal, public form, alerts, API
›Custom SLA policies per priority and contract
›AI auto-classification on new tickets, suggested replies inline
›Parent/child tickets, merge, linked tickets
›Two-way email threading with auto-reopen on contact reply
›Saved views — personal or shared — with capture-from-URL
›Inline KB search in the reply composer (deflect or attach)
›Internal notes, @mentions, side conversations, audit trail
›Approval gates that hold tickets until N approvers sign off
›CSAT surveys on close with an automatic reminder
02

Remote monitoring (RMM)

One agent. Real telemetry. No surprise CPU spikes.

Our agent runs on Windows, macOS, and Linux with a Rust core and is single-binary by default. Heartbeats and event writes batch through an async ingest queue (with optional Redis backend for multi-instance deployments) so a thousand flapping endpoints don't take down your DB. SNMP polling extends visibility to network gear with eight built-in profiles.

/devices/monitoring/patch/scripts/discovery/network
›Lightweight cross-platform agent with .exe / .msi / .dmg / .deb installers
›Real-time CPU, memory, disk, network, and service telemetry
›Custom checks in PowerShell, Bash, Python with attestation
›Patch management with maintenance windows and deployment rings
›Software inventory and license tracking
›Alerting with deduplication, quiet hours, severity rules
›SNMP v1/v2c/v3 polling — Cisco, MikroTik, Ubiquiti, Fortinet, HP/Aruba, Sophos, printers, UPS
›Async ingest queue scales to 5k+ endpoints with 200-job batching
›Self-healing automations triggered on alert events
›Auto-discovery of unmanaged devices on the network
03

Remote desktop & shell

Real-time remote control, included on Pro and above.

Remote control is built in — not an add-on. Our agent-helper crate ships with hardware H.264 encoding (Windows Media Foundation, macOS VideoToolbox, Linux VAAPI) with OpenH264 software fallback, so connections are crisp without saturating uplink. ConnectWise sells ScreenConnect separately; we don't.

/devices
›Click-to-connect from any device row — no client install
›Hardware H.264 encoding with OpenH264 software fallback
›Per-platform encoders: MF (Win) / VideoToolbox (Mac) / VAAPI (Linux)
›Remote shell with full PTY (xterm.js)
›File transfer (push/pull, drag-drop)
›Native desktop client (Tauri 2) with system tray
›Native mobile app (iOS + Android, Expo) for tickets and alerts
›PAT auth — no password ever travels through the desktop client
04

PSA & billing

Quotes, contracts, time, projects, invoices, payments.

A real PSA, not a glorified ticket counter. Every contract has recurring invoice automation, every invoice has a Stripe payment link, and timesheet entries flow through a submit/approve/reject workflow with lock-on-approve. Vendors and purchase orders auto-spawn Asset rows when receive lines come in.

/quotes/contracts/invoices/timesheet/projects/opportunities/vendors/purchase-orders/qbr
›Quotes with public accept page (tokenized, org-branded)
›Quote → Invoice automation on accept; closes opportunity CLOSED_WON
›Contracts with billingDayOfMonth and recurring invoice automation
›Per-invoice Stripe payment links (one-off, cached, webhook-flipped to PAID)
›Timesheet with submit/approve/reject + lock-on-approve
›Dispatcher schedule board with weekly capacity bars and 7-day mini-bars
›Projects with task breakdowns and budget tracking
›Opportunities pipeline tied to quotes
›Vendors + purchase orders that auto-spawn Asset rows on receive
›QBR auto-generator with white-label PDF (saves 2 days a quarter)
05

Documentation, passwords, assets

IT Glue replacement, included on Pro and above.

We keep IT documentation where the work happens. Documents support polymorphic links — to assets, contacts, sites, tickets, contracts, projects — so reading a ticket gives you the runbook, the asset graph, and the password vault entry without 14 tab-switches. Passwords are AES-256-GCM with HKDF key derivation and every reveal is audited.

/docs/passwords/assets/lifecycle
›Articles, runbooks, processes, meeting notes, diagrams (markdown)
›Polymorphic links — bind a runbook to assets, tickets, contracts
›AES-256-GCM password vault with audited reveal log + 30s auto-hide
›CMDB with asset relationships (RUNS_ON, DEPENDS_ON, CONNECTED_TO)
›Auto-discovered hardware + software inventory
›ScalePad-style lifecycle: 6 stages, replacement cost forecast
›Warranty tracking with renewal alerts
›Custom fields per entity type (text, number, date, select, etc.)
›Bulk import/export (CSV, JSON, API)
›GDPR data export (full tenant JSON dump on demand)
06

Compliance, security, RBAC

Built for SOC 2, HIPAA, ISO 27001, and CIS — from day one.

Granular RBAC with 30 permissions and per-member overrides on top of role hierarchy. Four compliance frameworks ship seeded — CIS Controls v8, SOC 2 TSC, HIPAA Security Rule, ISO 27001:2022 Annex A — with attestation flows, evidence collection, and percentage rollups per framework.

/compliance/settings
›30-permission catalog with per-member grant/revoke overrides
›OWNER / ADMIN / AGENT / VIEWER / END_USER role hierarchy
›SAML 2.0 + OIDC SSO (Business plan, coming soon)
›SCIM 2.0 user provisioning (Business plan, coming soon)
›MFA (authenticator app) — included on every tier
›Full audit log on every privileged action
›CIS v8 (18 controls), SOC 2 TSC (17), HIPAA (15), ISO 27001 (16)
›Evidence attachments with attestation status + notes per control
›Encryption at rest + in transit
›On-prem / private cloud (Enterprise) with BYO region
07

Automation & AI co-pilot

If-this-then-that for your entire IT operation.

Workflows trigger on any ticket, asset, or alert event. The AI co-pilot has a tiered allowance baked into your plan — no surprise per-action overages mid-month. Use it for triage suggestions, KB article hints in the reply composer, and ticket auto-classification on intake.

/automations
›Trigger-based workflows on tickets, assets, alerts, schedules
›Conditional branches with custom predicates
›Time-based rules: escalations, follow-ups, reminders
›Run scripts directly on endpoints from a workflow step
›Send to Slack / Teams / Email / Webhook (HMAC-signed)
›Workflow library with templates
›AI auto-classification on every new ticket
›AI suggested replies in the composer
›Inline KB search from the reply box
›Predictable per-tier action allowance
08

Integrations & API

13 native vendor adapters and a clean REST API.

Every adapter is real — not a generic HTTP webhook with a logo. We pull users, posture, and events; we create severity-mapped Alerts and reconcile billing. The REST API uses HMAC-signed webhooks (sha256, x-adminsystem-signature header) with 3-attempt exponential backoff and a full delivery log.

/integrations/m365
›Microsoft 365 / Entra (CIPP-class): users, MFA, secure score, risky sign-ins
›EDR: CrowdStrike, SentinelOne, Defender, Huntress, Bitdefender
›Backup: Datto BCDR, Veeam, Acronis, Cove
›Distributors: Pax8, Sherweb, Ingram (CSP invoice reconciliation)
›Slack + Teams real outbound chat ops (vendor-correct format)
›Email-to-ticket inbound with subject-token threading
›REST API with Bearer + PAT auth, rate limited
›Webhooks with HMAC sha256 signatures and delivery log
›Public form builder (auto-creates tickets on submit)
›Native Tauri desktop and Expo mobile clients

All of this on every paid plan.

Free forever up to 2 techs and 25 endpoints. MFA and audit log included on every tier — never paywalled as a "security add-on."