Attestree
Run it free
FOR SMALL BUSINESS

MDM-grade control,
without the MDM bill.

Twenty machines, no MDM budget, but you still need to know what's installed and patch it. Attestree gives you inventory, driver rings, and Windows Update orchestration in one self-hosted appliance.

Request accessTalk to us
5–100 endpointsSelf-hostedSingle-serverNo per-seat pricing
FLEET · 24 ENDPOINTSlast sync 2m ago
  • patchKB5037768 · pending broad ring
    14 nodessig:9c4f…
  • driverDell.NetworkAdapter
    rev-12sig:1ab2…
  • installMicrosoft.PowerToys
    0.81.1sig:bd71…
  • blockVendor.Toolbar (auto-install)
    deniedsig:e45a…
  • driverLenovo.NetworkAdapter · canary ring
    rev-9sig:0fa9…
  • updatechoco/firefox
    125.0.1sig:7c33…
self-hosted · single-serververified
WHY THIS MATTERS HERE

Three things small-business buyers ask us about first.

One pane of glass

Inventory plus driver and Windows Update orchestration in a single tool — no MDM stack, no licensing tax.

Lightweight policy

Stop the noisy app from auto-installing. Force the critical patch. Skip the consultancy engagement.

Self-hosted appliance

Run on a single Windows Server you already own. No cloud-egress fees, no per-seat pricing surprises.

WHAT YOU GET

The products that fit a 24-machine shop.

Start with inventory and Windows Updates. Add driver rings as you grow. Everything runs from one self-hosted appliance.

/products/winget-enterpriseIn dev

Winget Enterprise

Attested install gates in front of every Windows package channel.

Read product
/products/inventoryIn dev

Inventory

One attested inventory across your package managers — winget and Chocolatey today, more as they land.

Read product
/products/driversPipeline

Drivers

Driver update rings with WHQL + provenance verification.

Read product
/products/windows-updatesPipeline

Windows Updates

Approve, stage, and attest every KB before deployment.

Read product
PRICING

Commercial — request access.

Pre-GA pricing is design-partner friendly. Tell us about your fleet — we'll come back within two business days.

Self-hostedNo per-seat taxSingle-server applianceApache-2.0 shim
ENDPOINTS

We'll only use this to schedule a 30-minute fit-check.

DESIGN-PARTNER QUOTE · TBD

"Design partner pipeline open. Be first to be quoted."

Your name here · IT lead, SMB design partner
COMPARE SEGMENTS

Same primitive, different posture.

SaaS engineering
Engineering-led security
SBOM-by-construction at ingest — multi-tenant SaaS, evidence mapped to EU CRA and Secure-by-Design.
Homelab
Hobbyists & enthusiasts
Free signed attestations for the artifacts your home fleet pulls.
Mid-market
50–2,000 endpoints
Drop-in policy in front of Intune, Chocolatey, and PSGallery.
Small businessYou are here
5–50 endpoints
Attested install gates without a full SOC.
Enterprise
2,000+ endpoints
Block unsigned artifacts at ingest across every channel.
Financial services
Regulated environments
Auditor-ready attestation evidence with cryptographic chain-of-custody.