Every machine, and what it really exposes
Run one command on a Linux, macOS or Windows machine. It shows a code, someone in your workspace approves it, and the machine reports in with its own key. From then on inline shows which services are reachable past each machine, which machines depend on them, and a firewall plan for each risk that undoes itself unless a person confirms it.
The whole fleet,
kept current
Machines online, a fleet score, open findings by severity, exposed services and devices on the network that nobody enrolled. The timeline fills as machines report: a port that starts listening, a firewall that changes, a burst of failed logins. Machines waiting for approval sit at the top until someone decides.
See what can
reach each port
inline matches each machine's live connections to every other machine's listeners. A port list says 5432 is open. The graph says PostgreSQL on db-01 is reachable from the whole local network, and only web-01, web-02 and backup-01 use it. Whatever the agent cannot read is shown as unknown, with the reason.
Firewall plans
that undo themselves
A plan only restricts or blocks named ports, in inline's own table, and leaves your rules and the default policy alone. You read the exact script and the one that removes it. Once applied, the change reverts on a timer unless it is confirmed, and the session you manage the machine through is always kept open.
A machine joins
when a person says so
The machine prints a code and its key fingerprint. Someone with enroll rights types the code into inline and sees the host, its addresses, its score and its worst findings before approving it. Nothing is written on the machine until then. To add many at once, a join token enrolls them as pending until approved.
Included
Related
Security
Advisories assessed for reachability in your code, malware alerts within minutes, remediation pull requests and an AI bill of materials per repository.
Read moreAccess control
A module and action permission model where people, coding agents and share links are all principals, each with exactly the access its role grants.
Read moreCloud monitoring
Connect an Azure subscription with one pasted command and read-only roles. inline turns its posture, health and spend into a prioritized list of findings.
Read more
Add your first machine
Run npx @pendral/inline-fleet join on any machine with Node 20 or later, then approve the code it shows.