ET Ducky - RMM with kernel-level root cause analysis

by•
ET Ducky is an RMM for Windows and Linux that reads the kernel event stream on every endpoint (ETW on Windows, eBPF on Linux). Every alert gets an automatic root-cause analysis backed by the kernel events that caused it. Remote desktop, patch management, behavioral security, automations, and natural-language reports run from the same agent at every tier. Start on the Free query tier with your own AI key, or take a 30-day trial with 1,000 AI queries and 20 agent seats, no credit card required.

Add a comment

Replies

Best
I'm Chris, and I build ET Ducky. I spent 15 years in IT operations and more than 10 in enterprise endpoint management. The RMM said a service was down and I still had to open Process Monitor to learn why. ET Ducky starts from the kernel event stream (ETW on Windows, eBPF on Linux). Every alert gets a root-cause analysis with the events that caused it. A patch is marked successful only when services come back up with no crash loops. Behavioral rules run on the same event stream. It is not an antivirus and does not replace one. One Windows or Linux server costs $5 a month on the Free query tier with your own AI key. The 30-day trial includes 1,000 AI queries and 20 agent seats with no credit card. Questions on ETW, eBPF, or self-hosting are welcome. Drafted with AI, reviewed by me.