The Spectrum platform

One system for the whole managed services business.

Spectrum brings the service desk, endpoint management, patching, cloud and identity assessment, security, network and forensics into one multi-tenant platform, so every reading, every call and every change lives on one record.

Why one system

The connections are where the value is.

A missing update is a monitoring fact, a security risk, a service desk call and a line in next month's client report. In separate tools those are four records maintained by four people.

  • Every finding becomes workAn exposure, a failed backup or a policy gap opens a call with the evidence attached, on the right client's desk.
  • Every count opens its listClick any number to see the machines, people or policies behind it, and open each one where it lives.
  • Every change is verifiedWork is finished when the end state is confirmed and nothing else broke, not when a script returned.
  • Every client report is currentReports are produced from live data in one house template, branded and paginated, in seconds.
Capabilities

Built for the full depth of the job.

Each area stands on its own against the specialist tools, and is stronger for sharing one record with the others.

Service desk

The heart of the platform, built for people and AI working the same queue.

  • Calls, queues, priorities and service levels per client
  • Machine-born calls from alerts, patch failures and policy gaps
  • Investigation notes drafted before the call is opened
  • Remote sessions only after the user allows them

Monitoring and endpoint management

A signed Windows agent that reports, reads and acts on request.

  • Health, performance and inventory, live
  • Alerts that open and close their own calls
  • Live reads and a reviewed script library
  • Local data sealed so only Spectrum can read it

Patch management

Windows and application updates, staged and proven.

  • Pilot, then wider groups, then the whole fleet
  • Users choose restart now, later or tonight
  • Every machine checked after the change
  • A grade that counts application flaws too

Microsoft 365 assessment

The tenant from the inside, read with least-privilege access.

  • Multi-factor coverage, admin roles and sign-in policy
  • Licenses in use against licenses paid for
  • Device compliance and disabled accounts
  • Every person, device and policy opens in its admin center

Azure assessment

Security, cost and right-sizing across subscriptions.

  • Internet-exposed ports and storage hygiene
  • Defender coverage and advisor findings
  • Twelve months of spend, by currency
  • Right-sizing judged on peak as well as average

Domain intelligence

How a client looks from the outside, scored and explained.

  • Mail posture, DNS, registration and certificates
  • Subdomain discovery and per-host grading
  • Lookalike and impersonation detection
  • Port scans only with authorization, always audited

Vulnerability and compliance

Posture measured against public standards, not opinion.

  • Benchmark checks on workstations and servers
  • Known flaws matched to public vulnerability records
  • Each client's own policies checked against its estate
  • Gaps raised as calls and rechecked before they close

Network intelligence

Firewalls, switches and access points, read from their configuration.

  • Guided onboarding with a collector per client
  • Facts taken from the device, never guessed
  • Firmware flaws matched to the exact version
  • Every onboarding change rehearsed before release

Forensics and incident response

Evidence collected, preserved and explained when it matters.

  • Collection from affected machines through the agent
  • Timelines and findings drafted with AI assistance
  • Client-ready incident reports in the house template
  • Chain of custody kept on the record
Architecture

Enterprise foundations, not a bolt-on.

Spectrum is designed for MSPs that serve many clients from one team, where a mistake in isolation or access is not an option.

Isolation at the data layer

Each client's records are separated by the database itself, row by row, so one client's data cannot appear on another's screen even if application code is wrong.

Microsoft sign-in

Staff and clients sign in with their Microsoft accounts. Spectrum checks the organization is enrolled before anything loads.

Least privilege, read first

Spectrum reads which permissions it holds before it asks for anything. A missing permission is reported as not assessed, never as a finding about the client.

A permanent audit trail

Notable actions by engineers and by RAY are written to an audit record that cannot be edited from the application.

Secrets in a vault

Credentials are held in a vault and used by the system. They are never shown on screen, never typed into a form, and never given to the AI.

A system that diagnoses itself

When something is blocked, Spectrum says what, why and what will clear it, on the screen where you noticed it.

Integrations

Works with the estate your clients already run.

Spectrum is built around the Microsoft cloud that most of the private sector depends on, and reaches the rest through open standards.

Microsoft 365Microsoft Entra IDMicrosoft IntuneMicrosoft Azure Microsoft DefenderMicrosoft TeamsPower BIWindows and Windows Server Firewalls, switches and access pointsPublic vulnerability recordsCIS BenchmarksDNS, mail and certificate standards
Client reporting

One house template. Every report.

Security assessments, incident reports and monthly service reviews all render through one professional template with your branding, a proper cover, running headers and page numbers. No more hand-built reports at month end.

Bring your hardest client.

We will show you Spectrum against a real estate, not a demo script.