Capabilities

See what SystemBuddy brings together

Browse the released product by operational area. Every category stays visible, readable, and directly linkable. Open any card for what it does, how it works, and where it stops.

Service operations

Move requests, communication, and repeatable work through one dependable service layer.

Support desk & SLAs

Manage tickets, priorities, queues, approvals, history, and service targets.

Self-service portal

One place for employees to ask for a laptop, an application, access or help. Each catalog item quietly becomes a ticket, an install job or an onboarding step using the same guards as the rest of the platform.

Guided setup and tours

A new workspace gets a setup checklist it can finish in any order, and each role gets a short tour of its daily actions. Both are dismissable and restartable from the Help menu.

Email-to-ticket intake

A monitored mailbox turns new mail into tickets and replies into comments, maps senders to requesters by policy, skips auto-replies, screens for personal data, and acknowledges with a reference.

Troubleshooting context

Opening a ticket shows whether the person is on shift, their devices with health and risk, recent signals, missing updates and their open requests, each section respecting what the technician may see.

Change management

Plan a change with its risk, its rollback and its maintenance window, have it approved by an administrator or a change board, and get warned when two windows land on the same machine.

Satisfaction and recurring work

A one-click survey when a ticket is resolved, scored by agent, category and team, plus scheduled maintenance tickets that repeat on a cron and target the assets involved.

Reports on a schedule

Pick the reports you want weekly, monthly or on your own schedule. They are rendered to PDF and emailed to the people you choose, with a history of every delivery and a retry when one fails.

Customer and employee portals

Give requesters a clear place to report issues, follow progress, and respond.

Knowledge base

Publish trusted guidance and connect reusable answers to service work.

Team chat and direct messages

Keep operational conversations close to the people and work they support.

Endpoints and assets

Understand and manage the devices people rely on with accountable technician actions.

Asset inventory

See ownership, operating systems, installed software, health, and device history.

Warranty and licence reminders

Warranty, lease and licence end dates raise reminders 90, 30 and 7 days ahead through the workflow builder, so they become an email or a ticket. A renewals view shows what is ending and keeps the previous date.

Endpoint management

Inspect services and processes, coordinate power actions, and run approved fixes.

Desktop agent and remote help

Give employees a simple help window and technicians useful device context.

Endpoint backup

Schedule encrypted incremental backups with browsable file-level restores.

HTTPS out of the box

The Windows installer sets up a hardened HTTPS edge: Let's Encrypt, your own certificate, or an internal CA for the LAN.

Selective public exposure

Expose only the modules you choose (chat, scheduling, portals, knowledge base) through a separate hardened listener; everything else answers 404, public sign-ins need a second factor, and one button locks it all down.

Module isolation

A flaw in chat or the service desk cannot reach the script and patch engines: privileged work is signed by a separate Windows service, and every privileged endpoint is proven closed to ordinary accounts by a test suite.

Keep working when a machine dies

Run a second server and a standby database so losing one machine does not stop the company. A wizard walks through the setup, checks it is really working, and prints a recovery plan using your own host names.

API keys and documentation

Give another system its own key with named scopes, an expiry and a rate limit. A key acts as a service and never as a person, so it cannot run scripts, install software or reach HR records.

Awareness and access reviews

Training programs built from your quizzes and articles, with automatic remedial enrolment after a failed phishing simulation, and recurring campaigns where managers confirm who should still have access.

Security validation

Turn authorized observations into evidence-backed findings and safer remediation decisions.

Authorized exposure assessments

Discover and fingerprint what your authorized perimeter exposes, correlate services to known CVEs, flag risky open ports by perspective, and record TLS posture passively.

Internal assessments

Assess private address space from an inside runner under an explicit written owner attestation.

Domain and email security

Review domain and mail protections to identify configuration gaps and suspicious risk signals.

Controlled validation

Validate approved findings with bounded checks designed to avoid uncontrolled exploitation.

Evidence-backed attack paths

Relate validated observations so teams can understand and prioritize plausible attack paths.

Phishing simulations

Run authorized exercises and record outcomes without impersonating real credential collection.

Security reports

Share findings, evidence, scope, and remediation guidance with the right stakeholders.

Intrusion signals

Turn sign-in failures and new admins, services, tasks, and ports into incidents, tickets, and remediation.

Honeypots and canaries

Place decoy ports and canary files, credentials, and URLs that never authenticate and alert on any touch.

Outbound register

Keep one list of every external destination the platform talks to, with allow, disable, and confirm.

Host posture

Score every managed device against a hardening baseline (firewall, disk encryption, patch age, antivirus, SMBv1, RDP, local admins, UAC) and feed the passing checks into compliance evidence.

Host risk score

One number per device fusing posture, vulnerabilities and detection signals, with the factors behind it, a 30-day trend, and a My security page where employees request fixes.

Network and cloud visibility

Catch service and infrastructure trouble before it becomes a support surge.

Service and API monitoring

Watch service health, APIs, certificates, and ports from one operational view.

Centralized syslog

Collect infrastructure logs, apply alert rules, and preserve searchable event context.

SNMP monitoring

Poll switches, routers, firewalls, and appliances and receive traps when state changes.

Network topology

Understand infrastructure relationships and move from an alert to its connected context.

Automation and updates

Coordinate approved change with visible policy, progress, and results.

Update Management

Review, approve, schedule, and track operating-system and agent updates.

Vulnerability and patch workflows

Match installed software to advisories with version-accurate filtering, show the exact fixed version, and drive patch tickets and workflows.

Install manager

Coordinate approved software packages and retain results for technician review.

Self-service software requests

Employees request approved applications or removal of software on their own device, or ask for an application not yet in the catalog; IT approves, declines or converts, and approval becomes a normal job.

Workflows and webhooks

Automate repeatable ticket actions and notify connected systems safely.

Security automation

Build workflows on intrusion, vulnerability, posture, canary and honeypot events: open a security ticket, notify staff, acknowledge, or isolate a device on the host firewall until an administrator releases it.

Integrations and identity

Connect operational systems and keep access aligned with organizational identity.

External integrations

Connect supported service and HR workflows without duplicating operational work.

Single sign-on

Use supported identity providers to simplify access and centralize authentication policy.

Multi-factor policy

Require an authenticator app for local accounts with a grace period, a guided enrolment, recovery codes, and a posture view of who is enrolled, due, or exempt through single sign-on.

Break-glass access

Time-boxed emergency elevation with a reason, a second approver, a second factor, alerts to every administrator, and an audit trail stamped with the grant.

AI assistance

Draft and summarize within reviewed workflows while keeping people in control.

AI triage and drafted articles

Suggested category, priority and assignee with a confidence and a reason, learned from your own resolved tickets even with no AI provider, plus one-click drafts of knowledge articles from solved tickets.

Mobile access and push

Stay connected to assigned work and timely notifications away from the desk.

Governance and reporting

Keep operational decisions traceable and communicate readiness with useful evidence.

Compliance evidence

Track evidence, ownership, and audit history alongside the underlying operational work.

Operational reporting

Deliver stakeholder views of service performance, assets, risk, and remediation.

Data viewer

Connect read-only to your own databases, build multi-screen dashboards of charts and tables, publish them to teams and employees with bounded variables and refresh, and export to Word or CSV with saved formats.

Approvals and audit history

Record accountable decisions for sensitive service, security, and update actions.

Privacy safeguards

Encrypt the most sensitive HR fields at rest, audit who touched them, flag pasted SSNs and card numbers in tickets and articles, and export or purge a person's data on request.

Tasks and boards

Coordinate internal work and make ownership and progress visible.

MSP and business operations

Support multiple client organizations and the people processes behind reliable service.

Multi-client operations

Serve distinct organizations while keeping their people, assets, and data properly scoped.

Client SLAs and routing

Apply client-aware service targets, assignment rules, and portal experiences.

People, onboarding, and training

Bring employee records, roles, assessments, and sign-off into one workspace.

Account provisioning

Create the Microsoft 365 and Active Directory accounts during onboarding, on your own domain controllers, after an administrator approves exactly what will be created. Offboarding reverses it.

Employee records and files

Print or export exactly the sections and documents you choose, with saved presets, and track document and training expiry with reminders, required documents per role and renewals that keep history.

Reviews and acknowledgments

Review cycles where the manager cannot see the self assessment until theirs is submitted, goals carried forward, sign-off, and policy acknowledgments captured as a signature with time and address.

Org chart and people analytics

A navigable reporting tree from data you already hold, plus headcount, attrition, tenure and starters against leavers, with every metric definition stated.

Enforced offboarding

Offboarding completes only when the person's devices are retired, locked or wiped by the agent, or provably offline with no session since access was revoked.

Scheduling, leave, and expenses

Plan coverage, manage time away, and route reimbursement requests.

See those capabilities in motion

Follow a support request from first report to reusable resolution.

Open the interactive demo