Optanik

Unified IT Infrastructure Management System

Take the desktop.
Run the whole fleet.

Optanik is a Unified IT Infrastructure Management System — one workspace for remote control, device management, patching, overlay network, Optanik Domain, Optanik DNS, Domain Users, Device Configuration (printers & mapped drives), LAN Sharing, File Management and Branches, BitLocker keys, Keyring, software deploy, automation, and ticketing — on Windows, Linux, and macOS. Enroll a machine once. Stop stitching five tools and a VPN client.

Start free — 1 machine What you get
  • Windows · Linux · macOS
  • No “click Accept”
  • No VPN client
  • $0 to try
  • $2 / endpoint / mo
  • Endpoint techs are free
app.optanik.com/harbor Live

Workspaces

Stream full desktops and URLs from your devices in the browser.

+ Category + New VDI
VDIs (12) URLs (4) All Endpoints (16)

Full desktop sessions — drag cards to organize.

Primary · laptops

Inactive
HQ-DESK-04 10.24.8.14 · Agent Open VDI
Inactive
WORK-PC 10.24.8.18 · Agent Open VDI
Inactive
DESIGN-MAC-2 10.24.8.41 · macOS Open VDI
Inactive
STORE-12 10.24.12.40 · Agent Open VDI

Servers · core

Inactive
WEB-01 web-01 · 10.24.1.20 Open VDI
Inactive
SQL-CORE-01 sql-core-01 · 10.24.1.10 Open VDI
Inactive
EDGE-GW-01 edge-gw-01 · 10.24.8.2 Open SSH
Inactive
PROX-01 prox-01 · 10.24.1.5 Open SSH

What Optanik is

A Unified IT Infrastructure Management System. Not a screen-share app.

You enroll Windows, Linux, and macOS agents into a workspace. From the browser you sit on the desktop, copy files, patch, deploy software, run Optanik Domain with DNS and Domain Users when you need a company domain, vault BitLocker keys, open Keyring for your endpoints, and let automations finish the job — including after hours. Customers can log into a white-label workspace. You never send a one-time code.

1 · Remote

Unattended desktop in the browser

Remote Control, full VDI, a single app, or a URL through that machine’s network. Join-session links, Ctrl-Alt-Del, auto login after reboot, PowerShell and SSH. The Windows agent starts before anyone signs in — so you reach the login screen.

2 · Manage

The fleet, not a spreadsheet

Live inventory, charts, groups, Group Policies, OS and third-party patching, software deploy, a ticket queue Optanik can open on its own, and reports you can hand to a customer as PDF, CSV, or Excel.

3 · Network, domain & security

Overlay, domain, and BitLocker vault.

Optanik Network pushes overlay DNS and firewall rules to a group. Optanik Domain gives you hosted Active Directory with Optanik DNS and Domain Users when you need a company domain without standing up your own controllers. Guests join the overlay without a licensed endpoint. Recovery keys stay in the vault after a device is gone.

What you get

Every capability below is the product. Not an add-on SKU.

Free and Standard are the same Optanik — one machine on Free, licensed slots on paid. Endpoint management technicians are not billed. Keyring ships with Optanik in read-only for your endpoints.

Unattended Remote Control

Take the desktop. Nobody has to click Accept.

VDI, apps, and URLs

Full desktops, one application, or a session through the device network.

Windows, Linux, macOS agents

One-line install. Auto-update. Reach the login screen on Windows.

Live device inventory

Online/offline, CPU, memory, disk, network, reboot from the same row.

File Management

Browse, upload, download, move — no shell, no extra tool.

Optanik Network

Group overlay, DNS, firewall. Guests join without a license seat.

Optanik Domain

Hosted Active Directory on the private overlay. Join eligible PCs.

Optanik DNS

DNS for the Optanik Domain — names that resolve on the overlay.

Domain Users

Domain users, groups, and password policy in the same workspace.

Device Configuration

Printer and mapped-drive templates — deploy to endpoints, groups, or Domain Users.

LAN Sharing

Local file and printer shares on the site LAN, next to the overlay.

Branches

Disk treemap on the endpoint — reclaim cache and logs, protect critical paths.

Groups & Group Policies

Live membership. Patch, security, network, software, automations.

OS + third-party patching

Soak days, install windows, 95% grade. Scan all or install now.

Software deploy

Push a package. See who still has Chrome 120.

BitLocker vault

Status and recovery keys — kept after a device is removed.

Keyring

Fleet logins, IPs, BitLocker, and TOTP in a Keeper-style vault.

IF / THEN automation

Detect, fix, verify, escalate. One alert for the job, not a flood.

Ticketing

Optanik opens the ticket. Employees file from a frontend UI.

Customer-ready reports

Health, patches, security, inventory. PDF, CSV, Excel, scheduled email.

Notifications

In-app, desktop, Telegram, SMTP, webhooks. Mute noisy boxes.

White-label workspaces

Your URL, logos, colors. Super Admin, Technician, or custom menus.

REST API

Scripts and CI call the same fleet. Look-only or full control.

MCP for AI

Ask Cursor, Claude, or ChatGPT. “Deploy Chrome to Sales.”

Open the full feature map →

Pricing that matches how you work

Pay for endpoints. Not the people who manage them.

$0 on one endpoint, twelve hours a day. Paid from $2.00 per endpoint / month, down to $1.50 at 10,000+. Invite every endpoint management technician at no extra cost.

Start free Volume pricing

REST API & MCP

Two doors into the same fleet.

You do not have to live in the Optanik screen. Other software can ask it questions. An AI you already talk to can too. You choose whether they may only look — or actually patch, reboot, and deploy.

REST API

For your other tools

A remote control for software

Your helpdesk, a nightly job, or a custom dashboard can ask Optanik the same things you’d click in the app — and get an answer back, even at 2 a.m. with nobody logged in.

  1. 1
    Something happens

    A store PC drops offline. A ticket opens. It’s time for the nightly check.

  2. 2
    A program asks Optanik

    Same question you’d hunt for in the UI: who is down, what’s pending, reboot this box.

  3. 3
    Optanik answers — or does it

    The list comes back. Or the patch already started. You see it in the morning.

Use this when the same job should run on a schedule, or another system needs the data without a person clicking.

REST API guide →

MCP

For you and an AI

A conversation instead of a screen

Connect Cursor, Claude, or ChatGPT. Ask in English. It looks at your machines — and if you allow it, it can create an update and send it to Sales without you opening Optanik.

Cursor · Harbor Ops

Which store PCs are offline?

LAB-SPARE went dark 22 minutes ago. The rest of Harbor Ops is online.

Push the Chrome update to Sales.

Package created. Deployment started on 8 Sales machines. I’ll watch it.

Use this when you’d rather ask a question than hunt through menus — a one-off check, or “do this now.”

MCP guide →

How they differ

Both doors lock to one workspace. Both can be look-only or full control. The difference is who is holding the remote.

REST API MCP
Who uses it Scripts, websites, nightly jobs You, talking to an AI
How you ask Another program sends a command A sentence in plain English
Feels like A remote control for software A technician you can text
Best for The same task, every night A question or “do this now”
Safety Look-only, or full control. One workspace. Look-only, or full control. One workspace.

Why buy Optanik

One product. The session, the patch, and the automation.

Typical stacks split remote desktop, inventory, patching, overlay VPN, file copy, and automation into separate bills. Optanik is a Unified IT Infrastructure Management System: you watch the machine, patch it, copy files to it, sit on its desktop, and tell an automation to finish after hours — in a workspace your customer can already log into.

Typical stack

  • Remote desktop in tool one
  • Inventory in tool two
  • Patching in tool three
  • Overlay VPN and file copy in tool four
  • Automation in tool five
  • VPN client just to look

Optanik

  • Remote Control on the device
  • Live inventory on the device
  • Patch policy on the same fleet
  • Optanik Network and File Management
  • IF / THEN on the same groups
  • REST API and MCP on the same fleet

Unattended remote access

Take the desktop. Share the session. Skip the truck roll.

Remote Control from the device page — a secure unattended session, not a please-click-Accept app. Full VDI desktops, individual application streams, and URL sessions through the device network. This is how you skip the truck roll.

  • Join-session links Second technician in, without handing over the keyboard.
  • Ctrl-Alt-Del & view-only Secure attention, control vs watch, loading that tells you what is happening.
  • Auto login after reboot Come back to a signed-in desktop. Reach the login screen because the Windows agent starts before anyone signs in.
  • PowerShell & SSH Same device list. Windows, Linux, macOS.

Primary · laptops

Inactive
HQ-DESK-04 10.24.8.14 · Agent Open VDI
Inactive
WORK-PC 10.24.8.18 · Agent Open VDI
Inactive
DESIGN-MAC-2 10.24.8.41 · macOS Open VDI
Inactive
STORE-12 10.24.12.40 · Agent Open VDI

Devices you can actually manage

Inventory, heat, and the action row in one glance.

Name, hostname, platform, IPs, online/offline, last check-in, agent version, hardware, notes. CPU, memory, disk, and network charts with last-hour and longer history (24 hours, 7 / 30 / 90 days). Hover or touch a chart to read the exact value. A high-utilization banner when something is on fire, and a per-device mute when a known-busy box should not spam the team.

  • One action row Reboot the computer, restart the agent, or open Remote Control.
  • Two tunnels on every OS Optanik Network (overlay) and Commands Tunnel (PowerShell, patches, software deploy, automation) — shown as Up / Down.
  • Groups that stay live Built-in OS groups plus custom groups — a customer site, a lab, all laptops. Group Policies and reports target membership as it exists today.
High utilization · STORE-12 disk 96%
DeviceIPStatusDisk
HQ-DESK-0410.24.8.14Online54%
STORE-1210.24.12.40Online96%
EDGE-GW-0110.24.8.2Online61%
DESIGN-MAC-210.24.8.41Online71%
LAB-SPARE10.24.8.90Offline—

Patch management

Compliance that has a grade, not a spreadsheet.

Fleet overview across Windows, Linux, and macOS: fully patched vs pending vs not scanned, reboot required. Per-OS policy with soak days, skip preview/feature releases, and auto-install inside a window — daily, weekly, monthly, or manual. Third-party apps with allow / defer / ignore.

  • 95% target Healthy / Fair / Needs work / Critical — and a notification when the fleet grade moves.
  • Scan all or install eligible now Drill into a device’s patch list with status detail and logs.

Harbor Ops fleet

Soak days on · skip preview / feature

94%Average compliance

Compliance20 patched · 1 pending

By OSWindows · Linux · macOS

Same endpoints

Files, overlay, domain, and the keys you used to keep in a spreadsheet.

File Management

Copy without opening a shell.

Browse, upload, download, and move files on enrolled endpoints from the browser. Open Branches for a size-colored disk treemap when you need to reclaim space. Windows uses the Optanik Network overlay; Linux and macOS use the command path first. Also available as a REST API and through MCP so an AI assistant can copy files without a desktop session.

Optanik Network

A group overlay, not another VPN client.

Per-group overlay with policy versioning. DNS and firewall / port-forward rules push to the group. Guest invites join only that network — they do not install the full agent or appear as a licensed endpoint. See who is on the latest policy, waiting, or failed to apply.

Security

BitLocker keys stay in the vault.

Security overview for the workspace and per endpoint. Windows BitLocker status and recovery-key vault, including keys kept after a device is removed. Security Group Policies, patch grades, and reports you can export.

Optanik Domain

Hosted Active Directory on the overlay.

When you need a company domain without standing up your own controllers, Optanik Domain runs on the private network with Optanik DNS and Domain Users. Enable the domain, create accounts, then join eligible Windows PCs from the workspace. Machines already on Microsoft Entra or your own Active Directory are left alone.

Optanik DNS

DNS for the Optanik Domain.

Manage DNS so hostnames and services resolve for joined machines on the Optanik overlay — from the same console as the fleet, not a separate appliance.

Domain Users

Users and groups for that domain.

Create domain users and groups, set password policy, and keep identity next to the endpoints those accounts belong on — in one Optanik workspace.

Device Configuration

Printers and mapped drives as templates.

Save a printer or drive mapping once under Device Configuration. Assign it to endpoints, groups, or Domain Users. Edit the template and every machine that has it updates on the next apply — Windows and macOS drivers included for printers.

LAN Sharing

Shares on the office floor.

Enable LAN Sharing so an endpoint can publish folders and printers on the local network for nearby PCs, while Optanik Network still covers remote access over the overlay.

Branches

File Management as a disk map.

Branches scans a drive into a nested treemap — size is space, color is kind. Spot reclaimable cache and logs, zoom folders, and keep protected paths (including the Optanik agent) marked so cleanup stays safe.

Branches

A disk map of the enrolled PC.

Branches is part of File Management. It scans a drive and draws every folder as a block — bigger means more space, and color shows what it is: cache, logs, apps, user data, or protected. Zoom in, use Worth a Look for space you can reclaim, and leave protected paths, including the Optanik agent, alone.

Automation

Detect. Fix. Verify. Escalate.

IF / THEN workflows with nested AND / OR, duration holds, persistent waits, and CHECK branches. Actions reuse real Optanik services — notify, open a ticket, scripts, reboot, services, processes, patches — with cooldown and max executions so a noisy condition cannot loop all night.

01

High CPU Protection

Hold, notify, act, re-check.

02

High Memory Protection

Catch the leak before the freeze.

03

High Disk Usage

Cleanup, wait, re-check, escalate.

04

Device Offline

Down Detector without the flood.

05

Service Recovery

Spooler and friends come back.

06

Critical Patch

Scan, install, confirm.

07

Reboot Required

Finish the job in the window.

08

Agent Update

Push when you want control.

09

Nightly Patch Scan

Know before morning standup.

10

Weekly Patch Install

Maintenance you can schedule.

Ticketing

Optanik can open the ticket. Employees can too.

One queue in the workspace. Automations and fleet events open a ticket when a person still has to look. Staff file from a frontend UI — they do not need a technician seat.

Opened by Optanik

The fleet files it first.

AUTO
  • #1842
    STORE-12 went offline Opened by Optanik · 2 min ago · linked device
    Open
  • #1838
    WEB-01 disk over 90% Opened by Optanik after High Disk Usage · in progress
    Working
  • #1831
    Critical patch failed on LAB-SPARE Opened by Optanik · waiting on tech
    Open

Employee UI

Staff file it themselves.

UI

Same queue the technician already works. No extra helpdesk product.

Keyring

The password vault that lives with the fleet.

Every enrolled machine already has a login, an IPv4, an Optanik IP, an OS, and a BitLocker key when one exists. Keyring is the vault those secrets land in — Windows, Linux, and macOS folders, one login per hostname, TOTP on the record. Same Optanik account. Built like Keeper. Wired to the fleet.

OS folders, already there

Every workspace starts with Windows, Linux, and macOS. A new endpoint lands in the right folder by OS.

One entry per hostname

Username, password, IPv4, Optanik IP, OS, and BitLocker when the agent has a key. Auto-created when you enroll the box.

Logins, notes, keys, Wi-Fi

The same record types you’d keep in Keeper — cards, SSH keys, licenses, passports — next to the fleet entries.

Authenticator on the record

Store a TOTP secret on a login and Keyring shows the rotating code in the vault. No second authenticator app.

Share a folder or one secret

Hand a record or a folder to another user on the workspace, or invite by email.

REST and MCP

List, get, create, share, and delete from scripts, Cursor, or Claude. Reads for everyone with a key. Writes need a Keymaster.

Included with Optanik

Read-only for your endpoints.

Open the vault, copy the login, grab BitLocker. You see the machines you already enrolled — not a blank password manager. Creating folders and entries takes a Keymaster seat.

Keymaster

$1.50/ user / mo

Create folders, add entries, edit system records, share, and store TOTP. Not the $1.50 volume endpoint rate.

Open Keyring

Reports

Hand it to a customer.

Dashboard, Endpoints, Device Health, Patch Compliance, Security Compliance, BitLocker Recovery Keys, Hardware Inventory, Software Inventory, Licenses, Availability, and custom reports scoped to a group. Export PDF, CSV, or Excel. Scheduled email so leadership gets the pack without logging in.

Reports

Device health, patch compliance, inventory, and availability for Harbor Ops.

Dashboard Device Health Patch Compliance Security BitLocker Availability
Device Health Report Harbor Ops · 2026-08-22
PDF CSV Excel
21Devices
19Online
2Offline
13Healthy
8Attention
85.7%Compliance

Connectivity19 online · 2 offline

Device status13 healthy · 8 attention

Patch compliance85.7% compliant

Fleet by OS6 Windows · 14 Linux · 1 macOS

Notifications

Reach people, not inboxes.

In-app bell, browser desktop notifications, Telegram with toggles, and email via workspace SMTP. Create Alert is task-level — one notification for the automation, not a flood per endpoint.

Workspaces

Looks like your product.

Named workspaces, custom login path, logos, colors, light and dark. Super Admin, Technician, or a custom role with exactly the menus they can use. White-label so customers log into something that looks like your company.

Software fleet

Who still has Chrome 120?

Package software and push it to selected endpoints or groups. Inventory of what is installed, on which hosts, and which versions — “who still has Chrome 120?” is a click.

Who it’s for

If you operate a fleet, this is the console.

Optanik is a Unified IT Infrastructure Management System. MSPs, internal IT, security, and operators enroll machines once and keep them. It is not a consumer “send me a code” screen-share.

MSPs and IT providers

One console for every customer workspace. White-label login so the customer sees your brand. Volume pricing gets cheaper as the fleet grows.

Internal IT and helpdesk

Reach a machine at the login screen after hours. Push patches on a soak policy. Let employees file tickets from the frontend UI. Open Keyring for your endpoints in read-only.

Security and compliance

Security Group Policies, BitLocker recovery, Keyring, patch grades, and exports. Automations that install critical patches, recover a downed service, or open a ticket when a person still has to look.

Software vendors

Stream a full desktop or a single application through the browser. Useful when the work has to happen on a specific Windows box but the user is on any device.

Small teams

The free plan is one machine and twelve hours of remote use a day — enough for a home lab, a single server, or a proof of concept before you license a fleet.

Field technicians

Browser-only. No extra VPN client just to see the fleet. Join an existing Remote Control session. Use PowerShell or SSH from the same page as the graphs.

Not for end users who only need a consumer screen-share (“send me a code”). Optanik is a Unified IT Infrastructure Management System for people who operate a fleet.

How it works

Enroll once. Run everything from there.

  1. 01

    Create a workspace

    Your URL, your users, your branding.

  2. 02

    Install the agent

    One line per OS. Onboarding code drops it in.

  3. 03

    Take the seat

    Remote Control, scripts, patches, groups.

  4. 04

    Wire it in

    REST for scripts. MCP for your AI. Same fleet.

Try the real product

One machine. Free. Same Optanik.

No credit card. Twelve hours of remote use a day on one endpoint. When you license a fleet, you pay per machine — endpoint technicians are not billed — from $2.00 / month. See volume pricing.

$0 To start
$2 Per endpoint / mo
$0 Per endpoint tech
Create free account

Enroll one machine. Keep it if the other four tools feel expensive.

A Unified IT Infrastructure Management System on one endpoint. Full product. Windows, Linux, and macOS.

Start free All features