Breeze
RMM + PSA
Monitoring, patching, remote access, ticketing. Confirm backup module maturity before Stabilize depends on it.
rmm.vasthelm.com
AGPL-3.0
Stack
Open-source tools. Multi-tenant from day one.
Subdomains under vasthelm.com. Vaultwarden on its own hardened host — everything else sized for blast radius and cost.
ITFlow
System of record
Clients, vendors, licenses, domains, contacts, RPO/RTO runbooks.
docs.vasthelm.com
GPL
Vaultwarden
Password vault
Dedicated hardened host. Highest-stakes service — never co-locate.
vault.vasthelm.com
AGPL-3.0
Wazuh
EDR / SIEM
Best available open-source EDR — not equivalent to commercial suites. Say so plainly.
siem.vasthelm.com
Open source
Restic
Backup + restore
Standalone until Breeze backup is proven. SaaS-tenant backup still needs a commercial supplement.
—
Open source
GAM7
Google Workspace admin
Domain-wide provisioning. Least privilege; never leave an authorized install unmonitored.
Dedicated VM / Cloud Shell
Apache 2.0