Tessix

Managed EDR + RMM

Always-on endpoint protection for Northern Michigan businesses. Per device, monthly, no contract required. Backup available as an add-on.

Tessix

Tessix is how NTS delivers always-on endpoint protection to businesses that want the security and monitoring of an enterprise EDR-and-RMM stack — without committing to a full managed-IT agreement. It runs on workstations, laptops, and servers as a clean monthly subscription. One of several NTS services that can stand on their own, available à la carte.



What's Included in Tessix

EDR Endpoint Detection and Response on every device. Behavioral detection, auto-isolation on threat detection, kernel-level visibility. Replaces traditional antivirus.
RMM Remote Monitoring and Management agent for telemetry, asset inventory, disk and memory health, and remote remediation tools.
DNS-layer protection Malicious-domain blocking at the DNS level. Catches phishing and command-and-control callbacks before the browser renders the page. Works on-network and remote.
Patch management Windows OS and third-party application patching, automated on a managed schedule. Critical security patches applied promptly; feature updates staged.
Centralized dashboards NTS monitors your fleet from a single console. Read-only customer access available on request.
Monthly health summary PDF report emailed monthly. Device count, threats blocked, patch compliance percentage, devices that need attention.
Operating systems Windows 10/11, Windows Server 2019/2022/2025, macOS 12+. Linux server agents on request.

Tessix Available Add-Ons

Data Protection

Data Protection3 add-ons
Endpoint backupPer device · monthly
Image-level backup for workstations and laptops. Local restore points and off-site copies.

Server backupPer server · monthly
Image-level backup for physical and virtual servers, with off-site copy for ransomware survival.

M365 Cloud BackupPer user · monthly
Daily backup of Microsoft 365 mailboxes, OneDrive, SharePoint, and Teams data — kept separate from Microsoft so accidental deletion, malicious deletion, or ransomware in M365 doesn’t take everything with it. Retention well beyond what M365 includes by default.

Network Infrastructure

Network Infrastructure2 add-ons
Tessix Site MonitorPer site · monthly
Network device visibility for switches, firewalls, access points, NAS storage, and other infrastructure that endpoint agents cannot reach. Reachability checks, performance telemetry, and offline alerting — delivered through a small on-site monitoring appliance.

NTS ControlPer site · monthly
Hosted UniFi and Omada cloud controllers for client network deployments. Centralized configuration, firmware management, and visibility across access points, switches, and gateways — without on-prem controller hardware.

Device & Identity

Device & Identity3 add-ons
Tessix MDMPer device · monthly
Mobile Device Management for iOS, Android, iPad, and tablet fleets. Device enrollment, app delivery, configuration profiles, and remote wipe for lost or stolen devices.

Tessix Sign-OnPer user · monthly
DUO multi-factor authentication paired with our Quickpass self-service password reset app. Users recover their Microsoft 365, Active Directory, and local-device passwords on their own — back to work in minutes instead of waiting on a ticket. Especially powerful when M365 is identity everywhere.

Password ManagerPer user · monthly
Centrally-managed password vault for your team — shared business credentials, secure sharing between coworkers, and audit logs. Eliminates sticky notes and shared spreadsheets.

Email Security

Email Security2 add-ons
M365 Email Security BasicPer mailbox · monthly
Email security layered on top of Microsoft 365 — advanced anti-phishing, malware scanning, attachment sandboxing, and click-time URL protection that goes beyond what M365 includes out of the box.

M365 Email Security PremiumPer mailbox · monthly
Everything in Email Security Basic, plus account-takeover prevention, data-loss prevention, encrypted email, and security awareness training (phishing simulations + ongoing training modules) for your team. The upgrade path when compliance or encryption is required.

What's Outside of Tessix

Help desk Tessix is the protection layer — not a help desk. For day-to-day user support (password resets, application help, printer issues), Spartan or Pro-Active is the right path.
Data recovery Backups (with the add-on) capture data. The labor of actually restoring data — user files, mailboxes, full system images — is billed as re-active work or covered under a higher tier.
Microsoft 365 administration Mailbox administration, licensing, Conditional Access, and Intune live in the Spartan and Pro-Active scopes.
On-site response Tessix is software. If something needs hands on a machine, that work is handled as a re-active engagement or rolled into a higher tier.
Network equipment Tessix endpoint agents install on Windows, macOS, and server operating systems. Switches, firewalls, access points, and NAS units sit outside the endpoint agent — visibility for those devices is available through the Tessix Site Monitor add-on.

1 of 3

Talk with NTS about Tessix

Tell us how many workstations, laptops and servers, plus which operating systems. We'll send a written quote, deployment timeline and sample monthly report.