Platform Capabilities
Features
Ordyn is an agent-based endpoint and infrastructure management platform.
Endpoint Management
Endpoint Inventory
OS, hardware, software, services, processes, updates, disks, memory, network interfaces, Docker resources, Hyper-V VMs, and security posture - collected automatically and kept current.
Inventory is not just a static report. It feeds dynamic groups, software matching, update planning, alert rules, IPAM observations, switch-port mapping, and automation decisions. Admins get the operational view they need before touching a machine.
Software Management
Model applications as products, variants, channels, and packages. Deploy, update, and uninstall with reusable package workflows across any scope.
Package workflows can install, upgrade, uninstall, run commands, run saved or inline scripts, collect logs, branch on results, work with files, inspect services and processes, use secrets, and collect artifacts. Ordyn compares managed versions against endpoint inventory, plans updates, respects product channels, and handles aliases and detection rules.
Package Discovery
A built-in discovery service checks vendor download pages for new software versions using a real browser and a reasoning model - automatically.
Locate offline installers, optionally download them, and import into Ordyn as package candidates. Supports scheduled scans, product-specific hints, and pattern memory so successful discovery patterns are reused in future scans. Reduces repetitive manual package maintenance.
Alert Rules
Turn endpoint telemetry into visible operational signals. Built-in checks cover uptime, memory, disk, Secure Boot, Defender, Firewall, and security posture fields.
Built-in checks include: uptime, memory usage, disk usage, Secure Boot, Microsoft Defender state, Windows Firewall, Credential Guard, Device Guard, HVCI, LSA protection, UAC, and Remote Desktop settings. Custom script-based rules evaluate output from endpoint scripts, making it possible to add organization-specific health checks without building a new product feature.
Configuration Profiles
Keep endpoints aligned with a desired state. Ordyn checks compliance and remediates drift.
Current profile types include Windows Update policy, Windows Firewall policy, and custom script-based profiles for Windows or Linux. Ordyn can optionally auto-remediate non-compliant endpoints on a schedule.
Automation & Scripting
Jobs & Automation
Reusable workflows with scripts, conditions, loops, variables, user prompts, and artifact collection.
Jobs can contain scripts, endpoint instructions, server-side scripts, package tasks, software update tasks, Windows upgrade tasks, collectors, user prompts, conditions, loops, variables, artifact collection, and handoff steps. Jobs run manually, on a schedule, through event automation, from assignments, from self-service, or as part of a staged orchestration with batch control and failure policies.
Scripting
Saved scripts reusable across jobs, package workflows, OS image workflows, collectors, alert rules, and configuration profiles. PowerShell, CMD, and Bash.
Scripts accept typed parameters, use secrets, return structured JSON, expose output fields to later workflow steps, and map exit codes to success, failure, or reboot-required outcomes. Supported targets: Windows endpoint scripts with PowerShell or CMD, Linux endpoint scripts with Bash, and server-side scripts with Bash.
GUI Automation
Automate recurring GUI-based tasks on Windows using the Ordyn Recorder. Workflows are executed via automatic sign-in on the device through the Ordyn Agent.
The Ordyn Recorder captures GUI interactions and turns them into reusable automation workflows. Execution happens through the Ordyn Agent, which handles automatic sign-in on the target device so workflows can run unattended without requiring a logged-in user session.
Provisioning & Network
Windows Provisioning & OS Deployment
Full PXE provisioning with unattended installs of Windows systems.
The provisioning stack supports PXE boot and deployment of Windows baesd systems.
SNMP Switch & Printer Management
Manage switches and printers alongside agent-managed computers. Port inventory, link state, VLAN data, MAC address tables, and endpoint-to-port mappings.
Through SNMP service clients, Ordyn collects switch facts, printer facts, port inventory, link state, admin state, speeds, aliases, VLAN data, learned MAC addresses, and endpoint-to-switch-port mappings. Write-enabled SNMP profiles can enable/disable switch ports and update port aliases. SNMP traps can trigger Ordyn jobs through event automation.
IPAM & Network Visibility
Tenant-aware IPv4 IPAM: document networks, reserve addresses, reconcile endpoint observations, run network scans, and collect lightweight service metadata.
Ordyn can document networks, reserve addresses, reconcile endpoint observations, create discovered network drafts, run network scans through net nodes, and collect lightweight service metadata for SSH, HTTP, HTTPS, SMB, RDP, VNC, FTP, Telnet, and IPP. IPAM receives data from agent interfaces, switch and printer endpoints, Telematik terminals, net-node probes, and scan results.
Network & PXE Services
The ordyn-net service handles local network operations: Wake-on-LAN, ping checks, IPAM scans, service probes, PXE boot, and SMB media staging for remote segments.
Lets Ordyn operate in networks where the Ordyn server should not directly reach every VLAN, subnet, or provisioning segment. Net nodes can be placed on-site to handle local operations.
Container & Virtualization
Docker & Container Visibility
Inventory Docker runtime, containers, images, volumes, networks, and Compose projects on Linux endpoints. Start, stop, restart, tail logs, and manage Compose projects.
Ordyn can check discovered Docker images against Docker Hub or custom OCI-compatible registries, detect newer tags, report digest drift, and apply tracking rules so update recommendations stay within the right branch or tag family.
Hyper-V Management
Windows Hyper-V hosts report virtual machine inventory including VM state, uptime, processor count, memory, generation, snapshots, and network adapters.
Ordyn can identify guest endpoints by VM metadata or network adapter MAC addresses. VM power actions and snapshot management are available through jobs.
Operations & Security
Self-Service for Windows Users
Expose approved jobs to Windows users through a local self-service portal - without Ordyn server access. Full audit, policy, tenant, and assignment controls remain.
Self-service is useful for safe, repeatable actions such as installing approved software, running repair tasks, or starting workflows that require user context. The portal runs locally on the endpoint and communicates through the normal agent channel.
Secrets, Files & Artifacts
Encrypted secrets for scripts, package workflows, service credentials, Windows accounts, and SNMP profiles. Jobs can upload files, retrieve files, and collect task artifacts.
Jobs and workflows can upload files to endpoints, retrieve files back into Ordyn, collect task artifacts, place previously collected artifacts on another endpoint, and keep logs attached to job history. Secrets are encrypted at rest.
Access Control & Audit
Tenants, folders, groups, roles, permissions, enrollment approvals, endpoint suspension, revocation, audit logs, license capacity tracking, and diagnostic views.
Makes Ordyn suitable for teams that need traceability and controlled delegation, not just remote execution. Support bundles and diagnostic views for jobs, endpoints, and relay connectivity help with incident response and troubleshooting.
Questions about a specific capability?
Get in touch and we'll show you how Ordyn covers your use case.
Contact