lbreeze
Software

Standby

Monitor every server. Page the right person. Prove it was handled. One agent for Linux and Windows, with monitoring, on-call, security and compliance in one place, and a status page that stays up when yours do not.

Features

Everything Standby does, area by area

From the first machine you enrol to the auditor who reads your evidence.

On-call and incidents

Paging that reaches a person, and only once.

Alerts become incidents, the right person is paged by severity, and a storm from one source is capped instead of paging over and over.

Escalation by severity

Chains by severity and label, paging by voice, text or the app through your own telephony account.

Rotas with the gaps shown

A coverage board, rotations, swaps and a calendar, with the hours nobody covers shown.

No alert storms

When a large part of the fleet goes quiet you get one alert, not one per machine. A critical alert is never swallowed.

Incidents with a timeline

Active alerts, your own work, shift handoff, and runbooks suggested on the incident.

A desktop app that rings

A Windows app with tray alerts and an alarm that rings until someone acknowledges.

On-call pay

Overlapping time counted once, leave, and a payroll export.

Monitoring

Gaps shown as gaps. Checks from outside.

Metrics, logs and checks from probe servers you place, with missing data never drawn as zero.

Metrics and logs

From Debian, Ubuntu, RHEL, Alpine and Windows machines, with dashboards you lay out yourself.

Probe servers you place

Web, port, ping, certificate and DNS checks. With two or more locations, a public incident opens only when at least two agree.

Heartbeats for scheduled jobs

Know when a backup or a cron job did not run, not only when a server is down.

SLOs and burn rate

Service level objectives with burn-rate paging, and capacity forecasting.

Service health

Health and an inventory read from your live web servers and databases.

Each machine says what it reports

Every machine's page lists what the agent collects there, so a blank chart is never mistaken for a quiet one.

Security

Security on what is really installed.

Vulnerabilities matched to each machine, a threat feed you can act on, and fixes that wait for a person.

Vulnerabilities, known-exploited first

On Debian and Ubuntu matched to the exact versions installed, with the upgrade that closes each; on RHEL and SUSE the fixes waiting; on Windows the missing updates.

A threat feed with a queue

Failed sign-ins, injection attempts and web-shell detections, and a ranked queue of what needs you first.

Safer patching

On Debian and Ubuntu, updates in maintenance windows to a few machines first, stopping at the first failure.

Firewalls from one place

Firewall policies and drift, a web application firewall, and IP control.

Two people to isolate

Auto-remediation with approval. Isolating a machine takes a second person.

Keys and secrets

Access keys, SSH key rotation, secret rotation and a vault, with a recorded terminal on your Linux servers.

Compliance and audit

Audit evidence, scored from what your machines do.

Technical controls scored live, people and process controls confirmed by your team, and evidence an auditor can open without an account.

The frameworks you adopt

ISO 27001, SOC 2, NIS2, DORA, GDPR, PCI DSS, Cyber Essentials, HIPAA, the CRA and the EU AI Act.

Risks and policies

A risk register, a policy library, policies mapped to controls, and a Statement of Applicability.

Reporting clocks

Deadline clocks for the reports NIS2, DORA, GDPR, the CRA and the EU AI Act require.

Audits, internal and external

An audit programme, nonconformities and corrective actions, and a certificates register.

Evidence packs

Read-only links that expire, or an auditor portal that shows only their engagement.

A public Trust Center

Your posture per framework and the documents customers ask for, on a page of its own.

Status page

A status page that stays up when yours do not.

In your own brand, on a server of its own, and resolved only when the alert has stayed quiet.

On a server of its own

Your customers can read it while the systems it reports on are down.

Honest resolution

An incident closes only after the alert has stayed quiet, and reopens if it fires again.

Uptime and SLA targets

Per-minute uptime bars, SLA targets per component and availability reports.

Subscribers

Email with double opt-in, a feed, and Slack, Discord and Teams.

In your brand

Your own brand on the page your customers read.

Badges and a widget

Show live status on your own site with a badge or an embedded widget.

Fleet, service desk and datacenter

Every machine, and the room it stands in.

Servers and laptops in one place, a service desk with changes and approvals, and the datacenter itself.

One agent, every machine

Debian, Ubuntu, RHEL, SUSE, Arch, Alpine and Windows, servers and workstations, installed with one command.

A fleet command centre

Scripts, host access, fleet updates and auto-update policies from one place.

Backups proved readable

Checked on a schedule, with maintenance windows and recovery planned around them.

Changes with a dry run

Change plans with a blast radius and an approval queue, and a calendar that spots clashes and gaps in cover.

Tickets and problems

Staff tickets, problems, a knowledge base, SLA policies and a service portfolio.

The datacenter

IP addresses, DNS with a console, switches, every server in its rack, hardware health, power and physical access.

Running it

Your install, your data, your rules.

Single sign-on, modules you switch on as you need them, and AI that drafts but never acts alone.

Sign-in your way

Two-factor codes, passkeys, single sign-on, SCIM and IP allow lists, plus service accounts.

Modules on and off

Switch on only the areas your team uses; the rest stays out of the way.

AI that waits for a person

AI staff draft investigations and fixes with your own providers and a spend cap. Every fix waits for approval.

Pairs with KStack

KStack alerts arrive as incidents, and KStack shows the availability Standby reports for each server.

Webhooks and an API

Alert sources, telephony, chat notifications, a notification log, webhooks and an API.

What leaves your install

The licence check sends your host name, enrolled count and an install fingerprint; the vulnerability match sends each machine's software list.