Skip to content
Early access: now inviting MSP design partners

Self-healing endpoints for MSPs. Fix Windows problems before they become tickets.

DexRite finds what is wrong on every Windows device you manage, explains why, and fixes it automatically with signed, tested actions. Across every client, from one console, with proof of what was fixed.

  • Signed actions only
  • mTLS for every device
  • Isolation per client
  • Works alongside your RMM
Illustrative console view. All figures, client and device names are sample data.

The problem

Every ticket you prevent is margin you keep.

MSPs are paid a fixed fee per device or user. The same handful of Windows problems turn into the same tickets, every week, at every client. Each one costs technician time that the contract does not pay for.

Ticket volume grows with every device

Full disks, stopped services, broken updates and stale drivers. Small, known problems that users notice before you do, and report one at a time.

Technician time goes to repeat fixes

Skilled people spend their day on fixes that could be a script, if someone wrote it, tested it and dared to run it across many clients at once.

Good work stays invisible

When IT works, clients see nothing. Without evidence of problems prevented, renewals turn into a conversation about price.

How it works

See, understand, fix, prove.

A lightweight agent on each Windows device and one console for every client. Each step leads to the next, so an insight ends in a fix and a fix ends in a record.

  1. 01 · See

    Inventory every device

    Hardware, software and versions, OS and patch state, vulnerabilities and end-of-life software, kept current by small change-only updates from the agent.

  2. 02 · Understand

    Score health, explain the cause

    A 0–100 health score per device, rolled up by client, site, model and app. It shows which signals lowered it, and groups affected devices into Issues.

  3. 03 · Fix

    Fix now, or automatically

    Run a signed action from the library on one device or thousands, or let an Autofix policy detect, fix and verify on the device itself, even offline.

  4. 04 · Prove

    Show the value to clients

    Reports per client: problems fixed, tickets prevented, technician hours saved and health over time, ready to share in your own brand.

Product

Everything between “something is wrong” and “it is fixed, and here is the proof”.

Built for technicians who need to act on many devices at once without writing scripts, and for owners who need to see the result.

Inventory and vulnerabilities

A complete, current picture of every Windows device, with software names normalized so reports stay readable.

  • Hardware, software, versions, OS and patch state
  • CVEs prioritised with CISA KEV and EPSS
  • End-of-life software flagged across all clients

Health score and Issues

One number per device that you can explain to a client, and a list of what to fix first.

  • 0–100 per device, rolled up by client, site, model and app
  • Shows the signals that lowered each score
  • Issues group affected devices with a recommended fix

Fix now with signed actions

A library of ready-made, tested fixes. Pick devices, pick an action, run it. No blank script editor.

  • Every action cryptographically signed and checked on the device
  • Approvals for high-risk actions
  • Staged rollout with automatic pause on failures

Autofix policies

Self-healing that runs on the device: trigger, check, fix, verify. It keeps working when the device is offline.

  • Start in monitor mode: see what would be fixed, change nothing
  • Every fix verified afterwards, failures escalated
  • Shared policy libraries across clients

Multi-tenant MSP console

Every client separate by design, and every client in one view when you need it.

  • Partner → client → device hierarchy
  • Cross-client views of issues, software and vulnerabilities
  • Roles scoped per client for your technicians

Reports

Evidence of the work you do, in a form clients understand.

  • Problems fixed, tickets prevented and hours saved per client
  • White-label reports in your own brand
  • Scheduled delivery to client contacts

Live query

Coming soon

Ask every device a question and get answers in seconds: which machines have this file, this registry value, this process running. Not available yet; design partners will see it first.

Join early access

Built for MSPs

Make your RMM self-healing.

DexRite works alongside the RMM and PSA you already run. Keep your remote control, patching and ticketing. Add a layer that finds problems early and fixes them without a technician.

Partner → client hierarchy
Each client is its own isolated tenant. Your team works across all of them from one sign-in.
Co-managed IT
Give a client's in-house IT team access to their own devices, with roles you control, alongside yours.
Deploy with your RMM
Roll out the signed Windows installer with the tool you already use, or through Microsoft Intune.
Margin you can show
Tickets prevented and hours saved per client, so renewals are about value, not price.

One partner, many clients, every device

Deploy the agent with the tools you already use

  • NinjaOne
  • Datto RMM
  • ConnectWise
  • N-able
  • Kaseya
  • Action1
  • Microsoft Intune
  • Any tool that runs an MSI

Product names are trademarks of their owners and are listed to show compatible deployment methods, not a partnership or endorsement.

Security and trust

An agent that runs as SYSTEM has to earn trust by design.

DexRite changes things on your clients' machines. These controls are part of the architecture, not settings you have to remember to turn on.

Read the security overview
  • Signed actions only

    The agent runs only action packs and policies with a valid Ed25519 signature. Unsigned or altered content is rejected and reported.

  • mTLS for every connection

    Each device gets its own certificate at enrollment. All agent traffic is mutually authenticated and encrypted.

  • TPM-backed device keys

    Device private keys are generated in the TPM where one is present and cannot be exported or copied to another machine.

  • Isolation per client

    Every query is scoped to a tenant, and PostgreSQL row-level security enforces it again in the database.

  • SSO and SCIM

    Sign in with Microsoft Entra ID, Google Workspace, OIDC or SAML. Provision and remove users automatically with SCIM.

  • Append-only audit log

    Every query, action, policy change and sign-in is recorded, and the record cannot be edited.

  • Regional data residency

    Each account lives in one region and its data stays there. EU first, with India and other regions to follow.

  • No standing staff access

    DexRite staff cannot see your data unless your admin grants time-limited support access. Every grant is audited.

Early access

Become a design partner.

DexRite is in early access. We are working with a small group of MSPs and internal IT teams to shape the product before general availability. Design partners run DexRite on real devices and work directly with the people building it.

What you get

  • Early access to new capabilities
  • A direct line to the product and engineering team
  • Influence over the roadmap and the action library
  • Hands-on help with rollout

What we ask

  • A pilot on a set of Windows devices
  • Regular, candid feedback

Contact

Talk to the team.

Book a demo, ask about pricing, or tell us about the problems your technicians fix every week.

Company
Specmatics Technologies Pvt Ltd

We reply within two working days. No newsletters unless you ask.