Continuous config validation
with closed-loop remediation

Built for distributed organizations with dozens of sites and lean IT teams. Inventory, backup, compliance, and remediation in one platform.

RealmHelm Compliance Policies Dashboard
You own your data
Native Azure security stack
Built for MSPs and enterprises

The closed loop process

From inventory to verified fix. Every configuration change is tracked, validated, and confirmed.

1

Inventory

Devices polled from PRTG, Active Directory, XProtect, or managed directly

+ screenshot
2

Backup

Scheduled config capture commits to your Git repository

+ screenshot
3

Validate

Governance policies check backups against your rules

+ screenshot
4

Remediate

Actions execute on live devices to resolve violations

+ screenshot
5

Recapture

Config backed up again to confirm the fix worked

+ screenshot

Continuous loop

Configuration management

Inventory management, configuration backup, compliance validation, and optional remediation.

Inventory from Multiple Sources

Poll devices from PRTG, Active Directory, Milestone XProtect, and Cradlepoint NCM. Automatic deduplication and metadata enrichment from config backups.

Git Based Config Storage

Every configuration backup commits to your repository with full version history. Diff visualization and change timeline for any device.

Policy Validation

Define compliance rules that run against stored configs. Scheduled validation with severity levels. Historical compliance at any point in time.

Optional Remediation

When violations are detected, the system can suggest fix commands for your review. Approve and execute on live equipment, then recapture configs to confirm.

JIT Credential Access

Credentials retrieved from Azure Key Vault only at execution time. Never stored on disk, never accessible to vendors.

Distributed Agents

On premises agents deployed to your sites connect outbound to the platform. No inbound firewall rules or VPNs required.

Write compliance rules in plain English

Describe what you want to validate in plain English. A private Azure hosted model generates deterministic validation logic. Your data stays private, and the model never learns from your configs.

  • Natural language rule creation from sample configs
  • Validation runs against backups, not live devices
  • Evaluate compliance at any point in history via Git
  • Configurable schedules and severity levels
Natural language rule creation interface

Pinpoint failing configurations

When a device fails validation, you see the specific configuration lines that need attention. Shows the failing config lines directly.

  • Missing configurations highlighted
  • Severity levels for prioritization
  • Suggested fixes ready for your review
Compliance violation details showing missing SSH configurations

Azure Hosted

RealmHelm Platform

Secrets

Azure Key Vault

Customer Owned

Git Repository

↑ check-in          ↑ credentials

Your Sites

On-Prem Agent

Managed

Network & Server Infrastructure

Security built in, not bolted on

The RealmHelm platform runs in Azure—hosted by NetPrecedent, your MSP, or deployed to your own tenant. Lightweight agents at your sites connect outbound to check in with the platform and retrieve credentials from Key Vault.

Flexible Hosting

Run the platform in our cloud, your MSP's environment, or your own Azure tenant.

JIT Credential Access

Agents retrieve credentials from your Key Vault only at execution time. Never stored on disk.

Your Git Repository

Config backups commit to your own repository. Full history and audit trail under your control.

Multi-vendor support

Backup, validate, and remediate across your entire infrastructure stack.

Network

Cisco IOS Cisco NX-OS Arista EOS FortiGate Dell OS9 Dell OS10 Aruba Ruckus Cradlepoint Siklu Ubiquiti

Server & Infrastructure

Windows Server Ubuntu Linux VMware ESXi Dell iDRAC

Interested in the closed beta?

Get in touch to learn more about RealmHelm.

[email protected]