Unattended remote
Take the desktop. Nobody clicks Accept.
Remote Control from the device page — full VDI, a single app, or a URL through that machine’s network. Second tech joins without taking the keyboard.
This is the truck roll you don’t take.
Features
What Optanik does.
All of it.
Optanik is a Unified IT Infrastructure Management System. Every card below is in the product — Free and Standard. Endpoint management technicians are not billed. Keyring ships in read-only for your endpoints. Jump to a job.
Remote & files
Reach the machine without sending a code or installing a VPN client.
Agents
Windows, Linux, and macOS. They stay.
Native agents from one Install page. One-line install. The Windows service starts before anyone signs in — so you reach the login screen.
Enroll once. The machine is yours after hours.
File Management
Copy files from the browser. No shell.
Browse, upload, download, and move files on enrolled endpoints. Also via REST and MCP — an AI can copy without a desktop session. Open Branches when you need a disk map instead of a folder tree.
No second file-transfer product.
Branches
The disk, as a map.
File Management scans a drive into a treemap. Big folders are big blocks. Color shows cache, logs, apps, user data, and protected paths so cleanup stays on the safe blocks.
See what is eating the disk before you delete anything.
Optanik Network
A group overlay. Not another VPN app.
Policy, DNS, and firewall rules push to the group. Guests join the network without becoming a licensed endpoint.
Device isolation applies to the Optanik Network only. It cuts one endpoint off from the other devices on the Optanik Network, and from the Optanik domain controller. The machine’s own network is not isolated. If that device is infected on its own network, isolating it on the Optanik Network can protect the remaining endpoints and the networks on the overlay.
The Optanik Network is what you isolate. The machine’s own network is not.
LAN Sharing
Share printers and folders on the local LAN.
Turn on LAN Sharing so endpoints can expose Windows shares and printers on the site network — for nearby PCs that need a local path, not only the Optanik overlay. Pair it with Device Configuration when you also push mapped drives and printers from the workspace.
Local share for the office floor; overlay for everywhere else.
Branches
A disk map of the enrolled PC.
Branches is part of File Management. It scans a drive and draws every folder as a block — bigger means more space, and color shows what it is: cache, logs, apps, user data, or protected. Zoom in, use Worth a Look for space you can reclaim, and leave protected paths, including the Optanik agent, alone.
Fleet
Inventory, groups, and the action sit on the same device.
Workspaces
Your brand on the login. Their machines in your console.
Named workspace, custom login path, logos, colors, light and dark. Invite people instead of sharing a password.
MSPs white-label it. Internal IT still looks like IT.
Devices
What’s on fire. What to click.
Online/offline, charts, high-utilization banner. Reboot, restart the agent, or open Remote Control from the same row. Isolate an endpoint on the Optanik Network — other devices on that network, and the Optanik domain controller, lose it. Its own network is not isolated.
You don’t open a second console to reboot.
Groups
Live membership, not a copied list.
Built-in OS groups stay in sync. Custom groups — a site, a lab, all laptops — feed policies, automations, and reports as they exist today.
Policy follows the fleet. You don’t re-pick names.
Group Policies
Attach patch, security, network, and software to the group.
Patch windows, security posture, overlay rules, software, and automations ride membership — not a one-off list of names.
One membership. Five kinds of work.
Domain & identity
A company domain on Optanik’s private network — without standing up your own domain controllers.
Optanik Domain
Hosted Active Directory for the fleet.
Run a private company domain on the Optanik overlay — with Optanik DNS and Domain Users in the same workspace. Join eligible Windows PCs when you do not already have on-premises Active Directory. Machines already on Microsoft Entra or your own domain stay where they are.
Domain join without a truck roll to a server room.
Optanik DNS
Names that resolve for joined machines.
DNS for the Optanik Domain so hostnames and services resolve for PCs on the private network — managed from the same console as the fleet.
No separate DNS appliance to babysit.
Domain Users
People and groups for the Optanik Domain.
Create and manage domain users and groups, set password policy, and keep sign-in identity next to the machines those accounts belong on.
Identity lives with the fleet — not in a side spreadsheet.
Device Configuration
Printers and mapped drives — once, then everywhere.
Build printer and mapped-drive templates under Device Configuration. Deploy them to endpoints, groups, or Domain Users. Edit a template and every machine that has it picks up the change on the next apply — no per-PC GPO scavenger hunt.
One Sales printer. Every laptop that needs it.
Patch, vault & Keyring
A grade, a vault, and Keyring for the fleet.
Patch management
Compliance with a grade. Not a spreadsheet.
Fleet view across Windows, Linux, and macOS. Soak days, skip preview releases, install inside a window. 95% target.
Know the fleet grade before standup.
Security
BitLocker keys stay in the vault.
Workspace and per-endpoint posture. Recovery keys kept even after a device is removed. Export the report.
Stop hunting keys in a shared inbox.
Keyring
A Keeper-style vault, already filled from the fleet.
Open Keyring and the OS folders are there. Each hostname is a login: credentials, IPv4, Optanik IP, BitLocker. Add TOTP, share a record, or keep SSH keys and Wi-Fi next to the machines. Included in read-only for your endpoints. Keymaster is $1.50 / month per user to create folders and entries.
Stop pasting workstation passwords into a spreadsheet.
Software deploy
Push a package. See who still has it.
Package software, send it to endpoints or groups, then open a version and see every device that has it.
“Who still has Chrome 120?” is a click.
Automation, tickets & reports
Fix it at 2 a.m. Or open a ticket. Hand leadership a PDF in the morning.
Automation
Detect. Fix. Verify. Escalate.
IF / THEN with duration holds and CHECK branches. Notify, open a ticket, reboot, patch. One alert for the task — not a ping per endpoint.
The noisy condition cannot loop all night.
Reports
Something you can hand to a customer.
Health, patches, security, BitLocker keys, inventory, availability. PDF, CSV, or Excel. Email on a schedule.
Leadership gets the pack without logging in.
Notifications
Reach people where they already are.
In-app bell, desktop notifications, Telegram toggles, workspace SMTP, and outbound webhooks.
Down Detector without the flood.
Ticketing
Optanik opens the ticket. Employees file it too.
Automations and fleet events can auto-create a ticket when a person still has to look. Employees submit from a frontend UI — no technician seat. Same workspace queue, linked to the device when there is one.
Helpdesk without a second product.
API & AI
Scripts and an AI use the same fleet. You pick look-only or full control.
REST API
A remote control for software.
Scripts, a nightly job, or another portal send HTTPS. One workspace. Read-only or full access. Named Bearer key with an expiry.
The 2 a.m. check runs with nobody logged in.
REST API guide →MCP
Ask in English. Same lock as the API.
Connect Cursor, Claude, or ChatGPT. Same workspace, look-only unless you allow changes.
“Deploy Chrome to Sales” can be a sentence.
MCP guide →The full Unified IT Infrastructure Management System is on one machine, free.
$0 to try. $2 per endpoint when you license a fleet. Endpoint technicians stay free.