Trisops
Request a Demo
Enterprise Infrastructure Console

Every console your team
opens all day. Now one.

Trisops consolidates vCenter, backup, disaster recovery, network monitoring and privileged access into a single on-premise console — so your infrastructure team stops switching tools and starts making decisions.

Request a Demo See the Architecture
14integrated modules
1login for every system
0data leaves your network
trisops.internal/dashboard
TOTAL VMs
2,148
1,902 running
BACKUP SUCCESS
96%
last 24h
VPG SLA
41 / 44
meeting target
CRITICAL ALARMS
3
OpManager
vCenter NetBackup Zerto OpManager PAM DB
ClientPolicyStatus
prod-db-02daily-fullSuccess
fin-app-11hourly-incrSuccess
legacy-erpweekly-fullFailed
Works with the systems already running in your data center
The Problem

Your infrastructure isn't scattered. Your visibility into it is.

Every platform in the stack has its own login, its own URL, its own interface language. The result isn't a technology gap — it's a coordination tax paid every single day.

Before Trisops

A different console for every question

  • Five to ten browser tabs open just to answer "is the customer's environment healthy?"
  • Backup status, DR posture and network alarms live in three unrelated products
  • VM start/stop actions happen ad hoc, with no approval trail
  • A client status report takes an afternoon of copy-pasting
  • Nobody can say, with confidence, which VMs are still costing money for nothing
With Trisops

One login. Every answer.

  • One dashboard shows every environment's health the moment you log in
  • Backup, DR and network data normalized into one comparable view
  • Every VM operation runs through an approval workflow, logged permanently
  • Client-ready reports generated and emailed in minutes, not hours
  • Idle and orphaned VMs surfaced automatically, with the savings attached
The Platform

Fourteen modules. One console.

Each module owns one part of the estate and can be switched on or off independently — an unlicensed or unused module never appears in the interface.

01 / DASHBOARD

Command center, not a wall of widgets

The first screen after login answers the only question that matters — is everything healthy? KPI tiles populate automatically from every connected system, and a live status rail shows exactly which integrations are reachable right now.

  • KPI cards for VM count, backup success rate, VPG SLA, active alarms, datastore usage and more
  • Role-aware — every user only sees the modules they're permitted to use
  • 30-day privileged-access heatmap surfaces unusual access patterns at a glance
DS UTILIZATION
88%
SNAPSHOTS
37
TOOLS OUTDATED
64
Mon
4
Tue
9
Wed
14
Thu
7
Fri
11
Privileged sessions — last 5 days
02 / CMDB SEARCH

Find any asset in under a second

Type a hostname, IP, DNS name or tag once. Trisops queries every vCenter environment and every OpManager device in parallel and hands back a single, ranked answer — no more guessing which console it lives in.

  • Searches VM name, IP, DNS, OS and tags across every registered vCenter
  • Searches device name, IP, type, vendor and model across the network estate
  • Results grouped and matched terms highlighted, with sub-second response
prod-db
prod-db-02.internal.localvCenter VM
prod-db-cluster-aPhysical Device
prod-db-backup-01vCenter VM
10.42.6.118vCenter VM
03 / OPERATIONS

Every infrastructure change, on the record

Starting, stopping or restarting a VM goes through a work order and an approval queue — never a direct, unlogged action. Once approved, engineers can open a full VMRC console session straight from the browser.

  • Work order lifecycle: pending, approved, completed, rejected or failed
  • One-click VMRC console access to the VM, no separate client required
  • Every action, approver and outcome permanently recorded in the audit log
Requested→ Pending approval→ Approved→ Completed
VMActionRequested by
fin-app-11Restarta.kaya
poc-analytics-02Power offm.demir
web-front-04Power one.yilmaz
04 / COST OPTIMIZATION

Idle spend, found automatically

Trisops reads 30 days of vCenter snapshot history and surfaces every VM that's been powered off, untagged, or clearly a leftover proof-of-concept — with an estimated monthly cost attached to each one, ready to turn into a work order.

  • Detects VMs powered off 7+ consecutive days, with idle disk and monthly cost estimated
  • Flags proof-of-concept, test and demo VMs left running past their purpose
  • One click turns a finding into an approval-gated work order — nothing deletes itself
7+ DAYS OFF
58
MONTHLY SAVINGS
$4,120
VMIdle forEst. cost / mo
poc-ml-sandbox41 days$212
test-migration-old33 days$178
demo-crm-202429 days$94
AI Assistant

Ask your infrastructure a question. In plain language.

A chat assistant on every page answers directly from your live data — no hallucinated VM counts. Known question types are answered by direct database lookups; anything else falls back to an LLM with your infrastructure data as context, run locally via Ollama or through an external provider of your choice.

  • Rule-based answers for inventory, licenses, quotes and pending operations — zero hallucination risk
  • Entity search understands "where is prod-db-01?" and returns location, IP and power state
  • Run fully offline with a local model, or bring your own Gemini, OpenAI or Anthropic key
  • Reachable from Microsoft Teams via a signed webhook — no Azure app registration required
Infrastructure Assistant
@Trisops how many VMs are powered off right now?
58 VMs are currently powered off across 3 vCenter environments — 24 of them for more than 7 consecutive days.
any licenses expiring this month?
3 licenses expire within 30 days: VMware vSphere (Istanbul DC), NetBackup Enterprise, Zerto DR.
Pending operations? Untagged VMs Cost of 8 vCPU / 32GB?
Security

Built for infrastructure teams that get audited

Trisops holds credentials, session tokens and access to production systems — so it's engineered with defense-in-depth as a starting requirement, not an afterthought.

01

Granular RBAC

Per-page permissions mapped to roles, with native Active Directory group support and cached membership.

02

TOTP multi-factor auth

Standard TOTP, compatible with Google Authenticator, Microsoft Authenticator and Authy — enforceable org-wide.

03

Encryption at rest

Every stored credential, API key and TOTP seed is encrypted with Fernet (AES-128-CBC + HMAC-SHA256).

04

Hardened sessions

HttpOnly, Secure, SameSite=Strict cookies with HMAC-signed, time-boxed tokens and an 8-hour TTL.

05

Instant revocation

Logout or an admin-forced session revoke invalidates a token immediately — it doesn't wait out its TTL.

06

Rate-limited auth

Login and MFA endpoints are throttled by trusted client IP, closing off brute-force and credential stuffing.

07

Immutable audit log

Every login, action and configuration change is timestamped, attributed and permanently retained.

08

Secure-by-default headers

CSP, X-Frame-Options, nosniff and a strict referrer policy are applied to every response automatically.

Threat categoryControl appliedStatus
Credential brute-forceIP-based rate limiting on login and MFAProtected
Session hijackingHttpOnly + Secure + SameSite=Strict cookiesProtected
Cross-site request forgeryStrict same-site cookie policyProtected
Cross-site scriptingContent-Security-Policy + auto-escaped templatesProtected
ClickjackingX-Frame-Options: DENY + frame-ancestors noneProtected
SQL injectionParameterized queries throughoutProtected
Stolen-token reuseToken hash blacklist + per-user revocationProtected
Unauthorized page accessRBAC middleware on every requestProtected
Deployment

Runs inside your network. Full stop.

Trisops is deployed on your own Ubuntu server via Docker Compose — not in our cloud. Infrastructure credentials, customer data and audit history never leave your perimeter.

Application
FastAPI + Jinja2
REST API, page rendering, business logic
Database
SQLite (aiosqlite)
Users, settings, audit trail, job history
Reverse Proxy
nginx
TLS termination, static asset delivery
Containers
Docker Compose
Service isolation, volumes, auto-restart
Identity
Local + Active Directory
Session auth with TOTP MFA support
Encryption
Fernet (AES-128-CBC)
All stored secrets encrypted at rest
  • Guided install wizard configures modules, admin account, SSL, AD and SMTP in one pass
  • Enable only the modules you license — the rest never register a route or appear in navigation
  • Containers restart automatically after reboot or power loss — no manual intervention needed
  • Schema migrations apply automatically on update — no data loss, no manual scripts
  • One-click database backup bundles the database, SSL certificates and application code
Who It's For

Built around how infrastructure teams actually work

Daily operator

Infrastructure & PS Engineers

Check VM status, confirm backup success, monitor DR SLAs, and pull a client-ready report before a meeting — without fourteen browser tabs.

Oversight

Operations Managers & Team Leads

Approve work orders, track license renewals, and review team activity reports — with a permanent, exportable trail for every decision.

Configuration

System Administrators

Manage users and roles, configure integrations, run backups, and control exactly which modules are visible to whom.

Business Impact

What changes when the tooling stops fighting you

"

Idle spend stops hiding in spreadsheets

Every powered-off, untagged or leftover proof-of-concept VM is found automatically, with its estimated monthly cost attached — not discovered six months later during an audit.

"

Client reports go from hours to minutes

vCenter, backup and DR summaries that once took an afternoon of copy-pasting across consoles are generated and emailed on a schedule, in the format your customer expects.

"

No infrastructure change happens off the record

Every VM start, stop and restart runs through an approval queue and lands in an audit log nobody can edit — the answer to "who did this" is always one click away.

"

New quotes stop starting from a blank spreadsheet

Pull a live vCenter snapshot straight into a priced customer quote, with unit pricing, replication multipliers and Excel or email export built in.

Licensing

Licensed by capability, deployed on your infrastructure

Every tier is a self-hosted, single-tenant deployment — there is no shared infrastructure and no usage-based surprise. Pricing is scoped to your environment size and module selection.

Core

Unified visibility across your monitoring stack — the essential single pane of glass.

  • Dashboard, vCenter, NetBackup, OpManager, Zerto
  • CMDB cross-system search
  • RBAC, MFA, and immutable audit log
  • Active Directory / LDAP authentication
Get a Quote
Most Common Professional

Adds the operational workflow — approvals, cost intelligence and scheduled reporting.

  • Everything in Core
  • Operations approval workflow + VMRC console
  • Cost Optimization (FinOps) engine
  • Quotes calculator with Excel & email export
  • Scheduled jobs, email reports, license management
  • Delinea PAM & IT Analytics modules
Get a Quote
Enterprise

Full platform with AI assistance, chat-ops and a dedicated rollout team.

  • Everything in Professional
  • AI infrastructure assistant, local or hosted LLM
  • Microsoft Teams chat-ops integration
  • Custom module development
  • Dedicated onboarding & priority support
Get a Quote
FAQ

Questions procurement usually asks

Get Started

See it running against your own environment

Book a 30-minute walkthrough. We'll connect a read-only snapshot of your infrastructure and show the console with your own systems in it — not a canned demo.

  • No data leaves your network during the demo
  • Response within one business day
  • Pilot deployments typically live within two weeks

Request received

Thank you — a member of our team will reach out within one business day to schedule your walkthrough.