Read-only endpoint reconciliation for MSPs

Your tools disagree about your devices. Ledger settles it.

Ledger is a read-only auditor for MSPs. It reads from the RMM, EDR, Intune/Entra and PSA you already run, matches every device across them, and shows you what is unmanaged, unprotected, or billed wrong.

  • Read-only by default
  • Nothing to install on endpoints
  • Never changes your endpoints or policies
Sample reconciliation of four fictional devices across four sources
DeviceRMMEDRIntunePSAFinding
WS-0142 Matched
LT-0207 Missing EDR
SRV-0031 Managed, not billed
LT-0319 Billed, not managed
4 devices1 matched3 findings

Illustrative sample. Device names are fictional.

What it finds

The gaps between your tools, in plain language.

Fourteen built-in rules are re-evaluated after every sync, and you can add your own. These are a few of the findings they produce.

Missing EDR

No EDR agent has checked in for 14 days, at a client that runs an EDR product.

SecurityCritical

Silent agent

The EDR has gone quiet while the RMM still sees the device alive. The agent died, not the machine.

SecurityHigh

Managed, not billed

RMM and EDR both see the device, but no agreement line covers it. A direct revenue leak.

BillingHigh

Billed, not managed

An agreement line is billing for a device that no agent has seen live in 30 days.

BillingHigh

Orphaned agent

Seen by exactly one source for 30 days or more, likely a leftover from a migration.

HygieneMedium

Unmapped client

A device that cannot be attributed to any client yet, flagged until someone maps it.

HygieneMedium

How it works

From scattered records to one list you can trust.

Connect

Add read-only credentials for the tools you already use. Each connector has a step-by-step walkthrough, and nothing is installed on an endpoint.

Reconcile

Ledger matches records from every source into one device, explains each match, and sends the uncertain ones to a review queue rather than guessing.

Act

Work the exception list, export to CSV or XLSX from any screen, or get scheduled reports by email. Fixes happen in your own tools; Ledger does not change your endpoints or policies.

Connectors

Reads from the tools you already run.

Each connector has its own step-by-step credential walkthrough in the Ledger docs.

  • NinjaOne RMM
  • Datto RMM RMM
  • ConnectWise Automate RMM
  • Huntress EDR
  • SentinelOne EDR
  • Microsoft Defender EDR
  • Microsoft Intune Intune/Entra
  • ConnectWise PSA PSA
  • HaloPSA PSA
  • Autotask PSA

Principles

Built to be trusted with your estate.

Read-only by default

Ledger never installs an agent or changes a policy, and it only reads from your connected systems. The one optional exception is creating a ticket in your PSA, which stays off unless you turn it on.

Precision over recall

A wrong merge is worse than a missed one. When the evidence is thin, a device goes to review instead of being guessed at.

Shows its reasoning

Every merged device comes with the reasoning behind it, so a technician can check a match instead of taking it on trust.

Get in touch

See where your estate disagrees with itself.

Ledger is in active development. Tell us which RMM, EDR and PSA you run and we will tell you plainly whether Ledger fits.