Company separation
Every request is checked against the signed-in company, and automated tests check that one company cannot read another's data.
Everything your IT team and your staff use, what the Windows app does on a PC, who is allowed to do what, and how company data is protected. The screens below use sample data.

The IT Core desktop app opens the same site your staff use, and quietly keeps the PC listed in your Devices page.
IT can only restart a PC (after a 5-minute warning) or test its internet connection. Remote help uses your own tool (for example AnyDesk); IT Core only stores the ID on the ticket.
The app shows "Can't reach IT Core" with your IT phone number, which it remembers from the last check-in, so staff can still call IT.
Pick a situation to see how IT Core behaves.
People join as a User with your company code; IT changes their role. Every role only ever sees its own company.
| IT adminRuns IT Core for the company | TechnicianHandles tickets day to day | UserEvery staff member | ManagerReads reports, e.g. CEO | |
|---|---|---|---|---|
| Submit tickets, comment and chat with IT | ||||
| See every ticket in the company | ||||
| Update, assign and resolve tickets | ||||
| Delete tickets | ||||
| See devices and who uses them | ||||
| Enroll and remove devices | ||||
| Restart a PC remotely | ||||
| Test a PC's internet connection | ||||
| Manage assets and knowledge base | ||||
| Manage users, roles and company code | ||||
| Reports and IT performance | ||||
| Audit log |
Users see only their own tickets.
Built so one company can never see another, and a stolen PC or password does as little harm as possible.
Every request is checked against the signed-in company, and automated tests check that one company cannot read another's data.
Stored only as salted scrypt hashes. Nobody, including us, can read them.
HttpOnly cookie that scripts cannot read; lasts 7 days; stored on the server only as a hash.
After too many wrong attempts, sign-in pauses for 15 minutes.
Sign-ins and admin changes are recorded with who, what, when and the IP address.
Each PC has its own credential, encrypted by Windows. Removing the PC in IT Core cuts it off.
Sub-companies, departments and locations, plus your IT admin account.
Like GK-482193. Put it on the QR poster from Settings, or send it to staff.
With the company code and their employee code (for example GK1474A). They start as User.
IT Core Setup.exe plus enroll-token.txt. Double-click on each PC; it enrolls and can rename the PC.
Tell us about your company and we will show you ITCore with your own setup in mind.