Read-only endpoint reconciliation for MSPs

Your tools disagree about your devices. Ledger settles it.

Ledger is a read-only auditor for MSPs. It reads from the RMM, EDR, Intune/Entra, DNS filter and PSA you already run, matches every device across them, and shows you what is unmanaged, unprotected, or billed wrong.

  • Read-only access
  • Nothing to install on endpoints
  • Never writes back to your tools
Sample reconciliation of four fictional devices across four sources
DeviceRMMEDRIntunePSAFinding
WS-0142 Matched
LT-0207 Missing EDR
SRV-0031 Managed, not billed
LT-0319 Billed, not managed
4 devices1 matched3 findings

Illustrative sample. Device names are fictional.

What it finds

The gaps between your tools, in plain language.

Fourteen built-in rules are re-evaluated after every sync, and you can add your own. These are a few of the findings they produce.

Missing EDR

No EDR agent has checked in for 14 days, at a client that runs an EDR product.

SecurityCritical

Silent agent

The EDR has gone quiet while the RMM still sees the device alive. The agent died, not the machine.

SecurityHigh

Managed, not billed

RMM and EDR both see the device, but no agreement line covers it. A direct revenue leak.

BillingHigh

Billed, not managed

An agreement line is billing for a device that no agent has seen live in 30 days.

BillingHigh

Orphaned agent

Seen by exactly one source for 30 days or more, likely a leftover from a migration.

HygieneMedium

Unmapped client

A device that cannot be attributed to any client yet, flagged until someone maps it.

HygieneMedium

How it works

From scattered records to one list you can trust.

Connect

Add read-only credentials for the tools you already use. Each connector has a step-by-step walkthrough, and nothing is installed on an endpoint.

Reconcile

Ledger matches records from every source into one device, explains each match, and sends the uncertain ones to a review queue rather than guessing.

Act

Work the exception list, export to CSV or XLSX from any screen, or get scheduled reports by email. Fixes happen in your own tools. Ledger never changes them.

Principles

Built to be trusted with your estate.

Read-only, always

Ledger never installs an agent, changes a policy, or writes back to a connected system.

Precision over recall

A wrong merge is worse than a missed one. When the evidence is thin, a device goes to review instead of being guessed at.

Shows its reasoning

Every merged device comes with the reasoning behind it, so a technician can check a match instead of taking it on trust.

Get in touch

See where your estate disagrees with itself.

Tell us which RMM, EDR and PSA you run and we will tell you plainly whether Ledger fits. We read every message.