A Fortify 24x7 brand. Grown up security platforms, sold the way software used to be sold.Client sign inMail an engineer
Cyb3rs3cur1ty
Module 04 // Device fleet

Half of security is knowing what you own and keeping it current.

Nothing on this page is exotic. It is the unglamorous work of knowing which machines exist, keeping them patched, filtering what they can reach, and noticing when one stops phoning home. Skipping it is how companies end up defending hardware they had forgotten they owned.

N-able N-sightAddigyZimperium
4 lines / Windows, Apple and mobile / one agent for the fleet
Lines here4
PlatformsN-able N-sight, Addigy, Zimperium
One unit isA managed device
FilteringOn the same agent

The inventory problem, which comes before everything else

Ask a small company how many laptops it owns and you tend to get a number that is confidently wrong. Machines get bought outside the process, people leave and take hardware with them, and a spare comes out of a drawer for a new starter. An agent on every device turns that guess into a list, and the list is the thing every other control depends on.

After inventory comes patching, and patching is mostly about the third party software nobody tracks. Operating system updates get attention. The PDF reader, the browser, the compression tool and the conferencing client are the ones sitting three versions behind, and they are also the ones being used all day.

An agent turns a confident guess into an actual list.

Apple and mobile are not afterthoughts here

Managing Macs with tooling designed for Windows produces a fleet that is technically managed and practically ignored. Addigy is built for Apple, so profiles, updates and enrollment behave the way Apple intended rather than looking like a feature bolted onto something else.

Phones matter for one blunt reason: they read the mail. A handset carrying the same mailbox as the laptop deserves the same attention, and Zimperium delivers that on the handset itself, with nobody's traffic taking a detour first.

Lines on this module

Specifications and rates

Every rate below arrives live from billing. Anything you pick up drops into the inventory panel and sits there quietly.

Fortify-RMMSpec

Remote Monitoring and Management

N-able N-sight doing inventory, patching, scripting and remote hands

The base layer under a managed fleet. Hardware and software inventory, patching of the operating system and the usual third party software, scripted fixes, and remote sessions when somebody needs helping.

  • Inventory of hardware, software and patch state on every enrolled device.
  • Patch runs on a schedule covering the operating system and common applications.
  • Remote sessions and scripted fixes without dragging a laptop across town.
EngineN-able N-sight
BoxesWindows, macOS and Linux
Bundled inInventory, monitoring, patching, scripting, remote access
Shouts aboutDisk, service and check failures raised to our desk
Counted byManaged device, each month
Loadingper managed device
billed each month, in advance
QTY
Fortify-RMM-DNSSpec

Web and DNS Filtering

Filtering carried by the agent that is already there

Name resolution and web filtering handled by the agent already sitting there, so a machine stays covered in the office, at a kitchen table, or in an airport lounge, with nothing to rack and nothing to reroute.

  • Blocks known malicious and unwanted destinations before a connection opens.
  • Category rules you can set differently for different groups of machines.
  • Travels with the laptop, because the control sits on the device itself.
EngineN-able N-sight filtering
NeedsThe monitoring line on the same device
Where it worksApplies wherever the device happens to be connected
RulesCategory and destination rules per group
Counted byManaged device, each month
Loadingper managed device
billed each month, in advance
QTY
Fortify-ControlSpec

Apple Fleet Management

Addigy, built specifically for Apple hardware

Proper management for Macs, iPads and iPhones enrolled the way Apple intends, including configuration profiles, update enforcement, and wiping something that has gone missing.

  • Zero touch enrollment for hardware bought through the Apple programs.
  • Configuration profiles, update enforcement and software deployment.
  • Remote lock and wipe for a device that has left the building for good.
EngineAddigy
BoxesmacOS, iOS and iPadOS
Getting them onAutomated for eligible hardware, manual for the rest
LeversProfiles, updates, deployment, lock and wipe
Counted byApple device, each month
Loadingper Apple device
billed each month, in advance
QTY
Fortify-MobileSpec

Mobile Threat Defense

Zimperium, doing all of its thinking on the phone

Threat detection on the phone, for the fleet of devices that read your mail on a train. Analysis happens on the device, so a handset stays protected without funnelling its traffic through somebody else first.

  • Detects hostile applications, tampered devices and unsafe network behavior.
  • Analysis runs on the handset, so protection continues without a connection.
  • Covers iOS and Android, whether the phone belongs to you or to the person.
EngineZimperium
BoxesiOS and Android
Thinking happensLocal to the handset, with no traffic sent elsewhere
SpotsMalicious apps, jailbreak and root, hostile networks
Counted byMobile device, each month
Loadingper mobile device
billed each month, in advance
QTY
Honest scope

What sits in the box, and what does not

Fleet management is where a managed service earns its keep quietly. It is also where expectations drift, so here is the boundary.

IN THE BOX

  • A real inventory of every enrolled machine, which is the thing every other control leans on.
  • Scheduled patching of operating systems and the common third party software that never otherwise gets updated.
  • Filtering that travels with the machine, since the control lives on it rather than in a rack at head office.
  • Apple native management through Addigy, rather than Windows tooling with Mac support added later.
  • Mobile threat defense for the iPhones and Android devices carrying your mail around.

NOT IN THE BOX

  • A help desk for your staff. These lines give us the tools to fix machines. Answering general how do I questions from your team is a separate agreement.
  • Hardware. We do not sell laptops or phones, and we do not carry the warranty on yours.
  • Network equipment. Switches, firewalls and access points are not managed by any of these four lines.
  • Patching software the agent cannot see. Bespoke or unusual applications may have no update path an agent can follow.
  • Devices nobody enrolls. A machine outside the fleet gets no inventory, no patches and no filtering.
NOTE 01

Heads up: card statements show FORTIFY 24X7 - Cyb3rs3cur1ty is a Fortify 24x7 brand, and your subscription is billed by Fortify 24x7.