Virtum

Virtum Deploy

One live fleet. Every change approved.

Run everything you own, from laptops and servers to clouds, networks and applications, in one place, with every change approved and recorded.

Become a design partner See all 132 features

Private development Design partners Q1 2027 · wider access Q2 2027 (targets)

Why it exists

A dozen consoles, and nobody knows who changed what.

One console for laptops, another for hypervisors, three cloud portals, a backup tool, a monitoring tool. None knows what the others did, and anything can change without a record. Deploy brings it all into one inventory and one control plane: discover, watch, patch, back up and change, with approval first and every change verified.

How it works

Connect → See → Change → Verify

  1. 01ConnectEnrol devices with a one-line installer, or link a platform you already run.
  2. 02SeeOne inventory, live monitoring, logs, cost and capacity.
  3. 03ChangePatch, deploy, recover or act on any system, after approval.
  4. 04VerifyEvery change is checked, and rolled back if it fails.

In practice

Patch Tuesday, handled

  1. 41 security updates arrive for your Windows and Linux servers.

  2. Deploy drafts a three-ring rollout and checks the change calendar.

  3. You approve ring 1: fourteen non-critical servers.

  4. Ring 1 is healthy. Ring 2 starts on its own, within your rules.

  5. One server fails its health check; it rolls back and opens a task.

  6. Compliance shows 213 of 214 patched, with the exception owned.

Who it's for

Built for the people who run it.

  • IT teams

    One place to run endpoints, servers and cloud.

  • Service providers

    Manage estates for many clients side by side.

  • Platform and DevOps teams

    Ship applications to your own infrastructure.

How it connects

Connected to everything else.

Work passes between Virtum's services on its own. Nothing is retyped, and nothing falls between tools.

  • Deploy ↔ Security · fixes, rescans

    Security

    Vulnerabilities are fixed on the real machines, then re-checked.

  • Deploy → Operations · alerts, cost

    Operations

    Alerts become incidents; cost and capacity feed the overview.

  • Builder → Deploy · releases

    Builder

    Releases from Builder deploy to your targets.

  • Deploy → Docs · asset pages

    Docs

    Every asset gets a page that keeps itself current.

See it end to end →

What it does today

Everything in Deploy.

132 features across 13 areas. Search them, or open an area. The roadmap shows what comes next.

132 features
Devices and remote management Every endpoint and server, managed from one place.20
  • Enrol Windows, Linux, FreeBSD and pfSense with a one-line installer
  • Fleet inventory with an overview page for every device
  • Components, ports, storage, network, updates and backups per device
  • Device groups with remote-access rules: approver, hours and session length
  • Hardware inventory and health: sensors, SMART, temperatures
  • Remote desktop with approval
  • Remote shell and scripts
  • Start, stop and restart services; list and end processes
  • Reboot, shut down and wake devices
  • Browse, upload and download files
  • Lock input, blank the screen or message the logged-in user
  • Approval queue for device actions
  • Windows Server roles and features
  • Active Directory: users, groups, OUs, password resets, GPO links
  • Remote Desktop Services deployment
  • DNS zones and records
  • Docker containers on a device
  • Wipe, inspect and provision storage
  • Configuration drift and anomaly panels
  • Revoke, decommission or uninstall an agent; agents update themselves
Patching and software Patched in stages, verified, and reversible.10
  • Patch campaigns, including ones proposed by the assistant
  • Rollouts in waves: start, halt, resume, cancel
  • Rollouts that advance only while health holds
  • Linux and Windows patching, security-only if you choose
  • Rescan for vulnerabilities after patching
  • Patch compliance dashboard
  • Software catalogue with approval
  • Deploy and remove software with tracked runs
  • Software policies that apply themselves
  • Update history per device, reboot sweeps and power schedules
Monitoring and alerting Know before your users do.11
  • Monitors from scratch or templates, and a detection library
  • Thresholds for CPU, memory, disk, offline and temperature
  • Predictive alerts: days until a disk fills, failing disks, stale backups
  • Alert queue: acknowledge, assign, suppress, close
  • Alert correlation with evidence
  • Turn an alert into a ticket or task
  • Fix an alert: propose, run, verify
  • Service objectives (SLOs)
  • Maintenance windows that suppress alerts
  • Notification routing and on-call rotations
  • Anomaly detection and capacity forecasting
Logs, metrics and APM Everything your systems say, searchable.8
  • Log explorer with search, facets and live tail
  • Saved views and event detail
  • Log pipeline rules and source health
  • Log alert rules
  • Metric dashboards from scratch or templates
  • TV and kiosk dashboards with share links
  • Investigation notebooks
  • Application and network performance monitoring
Backup and disaster recovery Backups you can prove, recoveries you have practised.11
  • Backups per device: set up, run, verify
  • Scheduled backup verification
  • Restore point browser
  • Recovery requirements (RPO and RTO)
  • Recovery plans with steps and test drills
  • Continuity readiness and workload assessments
  • Recovery cases: plan, execute, verify, evidence
  • Declare a disaster and run it to closure
  • Continuity exercises
  • Live recovery with rollback
  • Recovery packages scanned before release
Infrastructure and virtualisation Hypervisors, clusters and racks under control.11
  • VM lifecycle: start, stop, clone, migrate, template, delete
  • Resize CPU, memory and disks; snapshots and rollback
  • Containers (LXC) and an in-browser VM console
  • Evacuate a host
  • Kubernetes nodes: drain, cordon, restart workloads
  • Provision Proxmox clusters, compute and Windows Servers
  • Blueprints and golden images
  • Rack documentation, power and capacity
  • Rightsizing recommendations
  • Topology map and infrastructure catalogue
  • Hardware lifecycle: contracts, custody, disposal
Cloud and cost AWS, Azure and GCP, and what they cost.13
  • Connect AWS, Azure and GCP and sync their resources
  • Model your cloud estate
  • Spend explorer and forecasts
  • Cost anomalies and budgets
  • Waste detection with one-click reclaim
  • Everything Virtum launches tagged with owner, purpose and expiry
  • Sandbox servers stopped when they expire, never deleted
  • Servers Virtum launched that never checked in are stopped
  • Daily AWS sweep for unowned resources: stop, snapshot and stop, or claim
  • Rightsizing and realised savings
  • Egress cost analysis
  • Showback reports and tag health
  • Ask the assistant about cloud spend
Networking Addresses, links, Wi-Fi and the network map.9
  • IP address management: subnets, allocate and release
  • WAN circuits with outage tracking
  • Port management and an interactive network map
  • Network map from the internet to each machine, with VMs inside their host
  • Who talks to whom, from connections the agents observe
  • Duplicate IPs, overlapping subnets and VLAN mismatches flagged
  • UniFi sites, devices, clients, Wi-Fi and ISP health
  • UniFi fixes, approved first: restart devices, secure Wi-Fi, block a client
  • MikroTik interfaces, ARP and DHCP leases
Domains and DNS Domains moved and hosted without breaking email or websites.7
  • Host a domain's DNS with Virtum on Amazon Route 53
  • Records copied email-safe and checked before you switch
  • Import a zone from Azure DNS, a zone file or live DNS
  • Nameserver and website cut-overs approved as changes, with rollback
  • Records checked through public resolvers for 48 hours after a switch
  • Certificate and CDN records written for your deployed sites
  • Transfer a domain to Amazon Route 53, approved first
Connectivity Every site's internet lines, contracts and faults in one place.5
  • Sites and lines with technology, router, contract and care level
  • Line orders approved by a second person, then tracked step by step
  • Faults logged with the carrier's reference and a linked ticket
  • Renewal reminders before each contract's notice deadline
  • Take over an existing line; the old one stays until the new one is proven
Application delivery Releases with gates, checks and rollback.10
  • Deployments: create, approve, apply, roll back
  • Release and security gates
  • Environments and deployment targets
  • Artifact library with secure downloads
  • Custom domains and certificates for deployed apps
  • Deploy to Kubernetes, VM pools, compute or static hosting
  • Runtime view with drift detection and remediation
  • Change calendar and change freezes
  • Scheduled jobs and a script library
  • Business services with dependencies and impact analysis
Automation and policy Desired state, enforced with approval.9
  • Automation policies and playbooks
  • Global automation freeze
  • Configuration policies with assignments and schedules
  • Effective policy per device
  • Drift: acknowledge, ticket or plan
  • Exceptions: request and decide
  • Remediation: propose, approve, run, verify
  • Assistant inspects and fixes infrastructure under approval
  • Usage metering and statements
Integrations Act on the platforms you already run, through one framework built to grow.8
  • Connector setup, validation, test and sync
  • Approval queue and audit log for integration actions
  • Risk rating and change preview for every action
  • GitHub and GitLab: pipelines, logs and pull requests
  • Jenkins builds
  • Terraform, OpenTofu and Ansible
  • Keycloak realms, clients and users
  • Kubernetes manifests and rollouts

Connected today

Works with what you already run.

Every integration runs through the same approvals and audit trail, and new ones are added as data, so the list keeps growing. How integrations work →

Infrastructure and cloud

  • Amazon Web Services
  • Microsoft Azure
  • Google Cloud
  • Proxmox VE
  • VMware vSphere
  • Kubernetes
  • Argo CD
  • Docker
  • Terraform / OpenTofu
  • Ansible
  • pfSense
  • MikroTik RouterOS
  • Windows
  • Ubuntu and Linux
  • FreeBSD

Source control and CI

  • GitHub and GitHub Actions
  • GitLab
  • Bitbucket
  • Azure DevOps
  • Gitea / Forgejo
  • Jenkins
  • Any git host

Identity

  • Microsoft Entra ID
  • Microsoft 365
  • Keycloak

Networking

  • UniFi
  • Amazon Route 53

Shared by every service

Plus the whole Virtum platform.

Put Deploy to work.

Design partners get early access and help shape what comes next. Or let Virtum run it for you as a managed service.

Become a design partner Prefer we run it for you?