Infrastructure registry for IT teams and MSPs
One record for every real thing in your infrastructure.
Your hypervisor, backup, NAC, asset tool and switches each keep their own copy of the same server. Onestead reads them all, works out which records are the same machine, and gives you one page for it — with the network around it.
- Self-hosted
- No per-device fee
- Works with the tools you already run
Server · virtual machine
erp-db-01
- Monitored
- Backed up 02:14
- Certificate expires in 19 days
Known from 6 sources
| Source | Its record | Matched by |
|---|---|---|
| Hypervisor | vm-4127 | BIOS UUID |
| Agent | ERP-DB-01 | BIOS UUID |
| Backup | ERP database | VM reference |
| Switch | 00:50:56:9a:3c:1e | MAC address |
| NAC | 10.20.4.17 | MAC address |
| TLS scan | erp-db.example.com | IP address |
- Host
- esx-07
- Rack
- R12 · U18
- Port
- core-sw-2 Te1/0/14
- Application
- ERP
Six tools, six names for the same machine.
Every system is right about its own slice. None of them knows about the others, so the questions that cross them take an afternoon: which switch port is this server on, is it backed up, whose application is it, what breaks if it goes down.
Onestead keeps each source as it is and adds the one thing missing: the link between their records.
- Which devices are on the network but in no inventory?
- Which servers have no backup job — and which jobs back up nothing we know?
- Where is this certificate installed, and what expires next month?
- What is plugged into this port, and what depends on this uplink?
How it works
-
1
Mirror every source
Each system is synced into its own tables, untouched. Nothing is merged at this point, so a source can always be re-read, compared or removed.
-
2
Resolve identity
One resolver decides which records are the same thing, from what the sources state: BIOS UUID, serial number, MAC, name. It shows the evidence, and you can link or split by hand.
-
3
One page per object
Every source adds a section to the same page: ports, VMs, backups, certificates, traffic, alerts. Lists and search work on objects, not on tool exports.
What it covers
One registry, and the working tools an infrastructure team needs around it.
Network
Switches, firewalls and access points: ports, VLANs, PoE, spanning tree, a live topology map and a trace from any address to its port.
IP address management
Subnets and addresses filled from what the network reports, with conflicts and unused ranges.
Racks and cabling
Sites, racks, elevations, power and capacity; cables and circuits followed end to end, from your device to the provider.
Servers and applications
Hosts, virtual machines and the applications they belong to, with owners, backup policy and dependencies.
Certificates
Every TLS certificate found by agents and scans, where it is in use, and roll-out of a replacement to the servers that need it.
Configuration
Scheduled config backups with diff between versions, compliance checks and templates for new devices.
Traffic
Who talks to whom: flows folded into a dependency map, link usage and applications nobody registered.
Alerts and history
Alerts tied to the object they are about, syslog, maintenance windows and a timeline of what changed.
Reads what you already run
Integrations are part of the product, not a migration path. Keep your tools; Onestead connects their records. Most connections are read-only.
- Network
- SNMP, SSH, syslog · Aruba ClearPass · Palo Alto · Cisco Meraki
- Virtualization
- VMware vCenter · Proxmox
- Backup
- Veeam
- Assets
- Lansweeper · NinjaOne · NetBox import
- Servers
- Onestead agent: inventory, connections, certificates
- Directory
- Active Directory users and groups
Where the product is
Onestead was built inside a working IT team and runs a production network every day. It is now being prepared for other organisations. We would rather tell you what is ready than promise it.
In daily use
- Object registry with identity resolution
- Network, IPAM, racks, cabling and circuits
- Servers, VMs, applications and backups
- Certificate inventory and roll-out
- Config backup, diff and compliance
- Windows agent with signed self-update
In development
- Network discovery without any other tool: point a collector at a subnet and objects appear
- Hardware and software inventory with credentials
- NetFlow, IPFIX and sFlow at volume
- Many organisations in one installation, for MSPs
- Linux containers, PostgreSQL, single sign-on
- Agents for laptops outside the office
Looking for the first teams to run it.
If you manage infrastructure for a mid-size company, or for several as an MSP, and the picture above looks familiar — write to us. Tell us what you run today; we will tell you honestly whether Onestead fits yet.
hello@onestead.io