Lockstep VM

Lockstep VM is a multi-tenant vulnerability-management platform that unifies assets, installed software, users and vulnerabilities from every source an MSP runs — EDR, RMM, MDM, vuln scanners, directory, and tools that have no API at all (via CSV/Excel import) — into one reconciled inventory.

Unified inventory

Devices, software and users are aggregated across sources and reconciled (NetBIOS device matching, Entra alias user matching) so one machine or person is one record — not one per tool.

Six integrations + CSV

SentinelOne, Rapid7 InsightVM, Microsoft Intune, ConnectWise Automate and Entra ID via API; plus a pluggable CSV/Excel provider framework for sources without an API (AutoElevate, badge systems, HR rosters).

Software rollup

Every source writes normalized rows into a shared collection that rolls up into a per-tenant software inventory with version tracking and source attribution.

Query builder + search

A structured, allow-listed query builder over assets and software, plus free-text search — server-validated against a field schema.

How to read these docs

• Start here — the Architecture and Data model explain how the pieces fit.
• User guide — task-oriented walkthroughs of the Assets, Software, Users and Data sources screens.
• Integrations — one page per source: what it pulls, how it authenticates, and what it writes.
• Reference — the API, backend & services, frontend & design system, and data model.
• Operations — Docker & local setup, deployment and the durable-workflows design.

Stack at a glance

Layer	Technology
Backend API	FastAPI (Python, async) — webapp/backend
Data	MongoDB (motor async driver) — schema-less, per-tenant
Frontend	Astro (SSR, Node adapter) + React islands — webapp/frontend
Auth	Better Auth (frontend) + JWT (backend)
Background work	FastAPI BackgroundTasks today; APScheduler worker; durable-jobs design proposed
Packaging	Docker Compose — mongodb, backend, frontend, worker
Docs	Astro Starlight (this site)