CertiDocWhy CertiDoc
- One place to see the status of every device, what it still needs to update and what has happened on the network.
- Alerts arrive before users call: by email and in the app, to the right people for each device.
- Every patch, alert and change is recorded: the evidence for your ISO 27001, NIS2 or ENS audit.
- In the cloud or on your own server, with each company’s data kept separate and encrypted.
Infrastructure monitoring
See at a glance which devices are healthy, which are running tight and which are down: PCs, servers, network gear, printers, UPS units and virtual machines.
Agent for Windows and Linux
CPU, RAM and disk for every device, services and processes, plus the operating system version. Deploy it by GPO or with one command; it updates itself.
Checks with thresholds
Nagios/Zabbix style: disk per drive, Windows or systemd services, processes, TCP ports with latency and SNMP OIDs, with warning and critical levels.
Network devices over SNMP
Switches, firewalls, printers, NAS and UPS units with nothing to install: uptime, interfaces, CPU and memory, over SNMP v2c or encrypted v3.
VMware vSphere
ESXi hosts, virtual machines, datastores and vCenter alarms through a read-only user: status, CPU and RAM usage, snapshots and VMware Tools.
Charts by date
CPU, RAM and disk history from 1 hour to 30 days or any date range, with averages and peaks, exportable to PNG and Excel.
Groups, types and filters
Organise devices into groups with their own icon and colour, by type (PC, server, network…) and by operating system, then filter or group the view.
Alerts to the right people
In-app and email alerts when a device goes down and when it recovers, with per-device recipients and the option to mute the ones you don’t need.
Retention and export
Choose how many days of data to keep and export the device list to Excel in one click.
Updates and vulnerabilities (patch management)
Know which updates each device is missing and which ones fix known vulnerabilities (CVEs), then install them from CertiDoc with full control and an audit trail.
Windows and Linux
Windows Update or your WSUS on Windows; apt on Debian and Ubuntu, and dnf or yum on Red Hat, Rocky and AlmaLinux. The agent checks every 6 hours and on demand.
CVEs and severity
Every patch with the CVEs it fixes and its severity: Microsoft’s rating, the distribution’s, or the CVSS score from the OSV database.
Filters and export
By severity, operating system, device group, status (pending, running, installed, failed) and text; export to Excel and CSV.
Installation jobs
Pick patches and devices, choose the reboot policy (never, or if required with a 5-minute warning) and confirm: the agent installs them and reports back.
A record of every job
Who requested it, when, on which devices and with what result, including the device log: direct evidence of vulnerability management.
Under your control
Nothing is installed without a confirmed job, and each device can be locked locally so it never accepts one.
- ISO 27001 · A.8.8 Management of technical vulnerabilities
- NIS2 · Art. 21 Vulnerability handling
- ENS · op.exp.4 Security maintenance and updates
UPS: monitoring, alerts, inventory and maintenance
Always know whether your UPS units will hold: status, battery and runtime, and an alert when the power goes out or a battery fails. With inventory and preventive maintenance in the same place.
USB or network
UPS units connected by USB to a computer with the agent are detected automatically, without the vendor software; network units are read over SNMP (UPS-MIB).
Real-time status
Mains or battery, battery charge, runtime, connected load, input and output voltages and the last self-test result, with 90-day charts.
Choose your alerts
Power cut, low battery, battery needs replacing, fault, overload, voltage out of range, high temperature and load, and UPS not reporting, with your own thresholds.
Email, push and TV
By email, in the app bell and as browser push notifications, plus a UPS card on the monitoring TV dashboard.
Inventory
Make, model, serial, location, power, purchase, warranty and battery date for every UPS, including the ones that cannot be monitored.
Preventive maintenance
Plans for battery replacement, inspection, cleaning, runtime tests and firmware, in the calendar with email reminders.
Centralised logs and detection
Syslog server
Receives logs from firewalls, switches, servers, VMware ESXi and vCenter, and phone systems (RFC 3164 and 5424), with a live viewer and history search.
SIEM dashboard
Events per hour, severities, devices and facilities over the last 24 hours, with an alert history to review and acknowledge.
Attack detection
Brute-force attempts against SSH or the phone system, and known malicious IPs (FireHOL and APIBAN), with instant alerts.
Less noise
Rules to drop or hide what adds nothing, using regular expressions and severities, plus templates for VMware.
Severity-based alerts
By email and in the app according to severity, and forwarding to an external SIEM if you have one.
Who opened, changed or deleted each file
The agent reads the Windows security log on the file server and shows access to the shared folders: the traceability evidence required by ISO 27001 and the ENS.
Reads, changes and deletions
Who read, wrote, deleted or moved each file, when and from which IP, without the noise of Office temp files, antivirus or computer accounts.
Search and export
Filter by date, user, action, folder and IP, and export to CSV for an audit or an investigation.
With your own policy
It works with the Windows auditing you already have (or set by GPO): CertiDoc does not change it, it only warns if a folder is not audited.
Retention to suit you
Choose how long access records are kept, from 7 days to 3 years.
- ISO 27001 · A.8.15 Logging
- ENS · op.exp.8 Activity logging
Systems inventory and documentation
Automatic inventory
Hardware and software of every device collected by the agent, alongside servers, network gear and devices.
Network scanner
Discover devices (IP, MAC, hostname and open ports) on any network segment.
Topology and floor plans
A geographic map of nodes and links (fibre, Wi-Fi, copper) and floor plans showing racks, Wi-Fi and cameras.
Licences and contracts
Software licences, subscriptions and maintenance contracts with expiry reminders.
Maintenance and changes
Scheduled maintenance, an infrastructure change log and procedures (SOPs).
Architecture and backups
Architecture documentation, backup and retention policies, network security and support contacts.
Active Directory, Microsoft 365, Google Workspace, access and secrets
Active Directory / LDAP
Domain users, groups and organisational units, with inactive account reports.
Microsoft 365 and Entra ID
Users with their MFA status, administrators, devices, licences, and audit and sign-in logs of the tenant, with a summary for the ENS and ISO 27001. Read-only, with no extra licences.
Google Workspace
Users with 2-Step Verification, super admins, groups, mobile devices and Chromebooks, and sign-in and admin activity logs for the last 6 months, with a summary for the ENS and ISO 27001. Read-only.
GPO
A Group Policy library to review and audit domain hardening.
AD audit
Results from tools such as PingCastle, Certipy or BloodHound to track directory risks.
Password manager
Credentials encrypted with the company key, and one-time links to share secrets.
Telephony, printing and internet use
Print control
Who prints, from which computer, on which printer and in colour or B/W, with counters, SNMP toner levels and costs.
Phone system calls
Real-time call records (CDR) from Grandstream UCM, Yeastar, 3CX and Asterisk/FreePBX: inbound, missed, per extension and time slot.
Browsing history
Sites visited per computer, user and browser, collected by the agent, in line with your acceptable use policy.
The CertiDoc agent
- A single lightweight agent for Windows and Linux handles inventory, monitoring, checks, patch management and history.
- Outbound HTTPS connections only: no inbound ports to open on the customer network.
- Mass deployment by GPO on Windows and with one command on Linux; it updates itself with signed packages.
- Any agent can act as a poller for the local network: SNMP, ports and agentless devices.
Plans
IT Management is included in the Business plan (from €149/month, Compliance + PRL + IT) and in Enterprise. It runs in the cloud or on your own server.
Frequently asked questions
Do I need an agent on every device?
Can we find out who deleted a file on the server?
Does CertiDoc install updates on its own?
Does it help with ISO 27001, NIS2 and the ENS?
Can we host it on our own server?
Are passwords as well protected as in KeePass?
Bring your infrastructure under control
We will show you monitoring and patch management with your own devices and explain which plan suits you. 14-day free trial.