Attestree
Run it free
FOR SMALL BUSINESS

MDM-grade control,
without the MDM bill.

Twenty machines, no MDM budget, but you still need to know what's installed and patch it. Attestree gives you inventory, driver rings, BIOS rings, and Windows Update orchestration in one self-hosted appliance.

Request access Talk to us
5–100 endpoints Self-hosted Single-server No per-seat pricing
FLEET · 24 ENDPOINTS last sync 2m ago
  • patch KB5037768 · pending broad ring
    14 nodes sig:9c4f…
  • driver Dell.NetworkAdapter
    rev-12 sig:1ab2…
  • install Microsoft.PowerToys
    0.81.1 sig:bd71…
  • block Vendor.Toolbar (auto-install)
    denied sig:e45a…
  • firmware Lenovo.BIOS · canary ring
    1.16.2 sig:0fa9…
  • update choco/firefox
    125.0.1 sig:7c33…
self-hosted · single-server verified
WHY THIS MATTERS HERE

Three things small-business buyers ask us about first.

One pane of glass

Inventory plus driver, BIOS, and Windows Update orchestration in a single tool — no MDM stack, no licensing tax.

Lightweight policy

Stop the noisy app from auto-installing. Force the critical patch. Skip the consultancy engagement.

Self-hosted appliance

Run on a single Windows Server you already own. No cloud-egress fees, no per-seat pricing surprises.

WHAT YOU GET

The products that fit a 24-machine shop.

Start with inventory and Windows Updates. Add driver and firmware rings as you grow. Everything runs from one self-hosted appliance.

/products/winget-enterprise In dev

Winget Enterprise

Attested install gates in front of every Windows package channel.

Read product
/products/inventory In dev

Inventory

Single source of truth across winget, Choco, npm, pip, .NET, PSGallery.

Read product
/products/drivers Pipeline

Drivers

Driver update rings with WHQL + provenance verification.

Read product
/products/firmware Pipeline

Firmware

BIOS / UEFI update orchestration with vendor signatures pinned.

Read product
/products/windows-updates Pipeline

Windows Updates

Approve, stage, and attest every KB before deployment.

Read product
PRICING

Commercial — request access.

Pre-GA pricing is design-partner friendly. Tell us about your fleet — we'll come back within two business days.

Self-hosted No per-seat tax Single-server appliance Apache-2.0 shim
ENDPOINTS

We'll only use this to schedule a 30-minute fit-check.

DESIGN-PARTNER QUOTE · TBD

"Design partner pipeline open. Be first to be quoted."

Your name here · IT lead, SMB design partner
COMPARE SEGMENTS

Same primitive, different posture.

Homelab
Hobbyists & enthusiasts
Free signed attestations for the artifacts your home fleet pulls.
Small business You are here
5–50 endpoints
Attested install gates without a full SOC.
Mid-market
50–2,000 endpoints
Drop-in policy in front of Intune, Chocolatey, and PSGallery.
Enterprise
2,000+ endpoints
Block unsigned artifacts at ingest across every channel.
Financial services
Regulated environments
Auditor-ready attestation evidence with cryptographic chain-of-custody.