Athena unifies software deployment, endpoint management, and infrastructure monitoring into a single platform — no cloud dependency, no per-seat nonsense, no compromise.
The Problem
SCCM is a 6-month deployment project. PDQ doesn't do monitoring. SCOM needs five servers just to say a machine is offline. Athena was built by people who actually live in enterprise networks.
Every component of Athena was designed assuming no internet access. No license servers to call home to, no cloud sync, no hidden dependencies that break in six months.
The lightweight Hermes agent deploys in under a minute via manual install or AD Discovery push. Runs on Windows and Linux. Bidirectional gRPC streaming for real-time shell, metrics, and package execution.
Athena's Blazor web console is purpose-built for deployment, endpoint management, remote access, and AD discovery. Monitoring via Argus is coming as a companion platform.
Scan your Active Directory automatically. Athena builds your endpoint inventory from existing AD structure — no manual imports, no separate discovery server.
CPU, memory, disk, services, and custom health checks — all streamed live from the Hermes agent. Alert thresholds, dashboards, and incident history included.
Agent-server communication uses certificate-based mutual TLS with automatic 60-day rotation. No shared secrets. AppLocker-compatible packaging pipeline included.
Comparison
Honest, feature-by-feature comparison against the tools you're probably already using — or being asked to buy.
| Feature | 🦉 Athena | SCCM / MECM | PDQ Deploy | Ansible | ManageEngine |
|---|---|---|---|---|---|
| Air-gap native | ✓ Built-in | ~ Complex setup | ~ Partial | ~ Manual | ✗ Cloud-required |
| Lightweight agent | ✓ Hermes (~40MB, Win+Linux) | ~ Heavy (~250MB) | ✗ Agentless | ✗ Agentless | ✓ Agent available |
| Real-time remote shell | ✓ Built-in gRPC | ✗ Needs RDP/PSExec | ✗ | ✓ SSH only | ~ Add-on |
| AD auto-discovery | ✓ Native | ✓ Native | ~ Basic | ✗ | ✓ |
| Deployment complexity | Low | Very High | Low | Medium | Medium |
| Compliance baselines | ✗ Roadmap | ✓ Full DCM | ✗ | ✓ Yes | ~ Basic |
| PowerShell data collection | ✓ Native | ✗ | ✓ Yes | ✓ Yes | ~ Limited |
| Registry data collection | ✓ Via PowerShell | ~ reg2mof (complex) | ✓ Built-in | ✗ | ~ Limited |
| Linux agent support | ✓ Native | ~ Limited | ✗ | ✓ Yes | ~ Add-on |
| AppLocker support | ✓ Native | ~ Manual policy | ✗ | ✗ | ✗ |
| mTLS agent comms | ✓ Auto-rotate | ✗ | ✗ | ~ Manual PKI | ✗ |
| Feature | 🦉 Athena | SCOM 2022 | Zabbix | Nagios XI | ControlUp |
|---|---|---|---|---|---|
| Air-gap native | ✓ Yes | ~ Partial | ✓ Yes | ✓ Yes | ✗ Cloud required |
| Setup complexity | Low | Very High | Medium | Medium-High | Low |
| Windows-native metrics | ✓ Deep | ✓ Deep | ~ WMI/SNMP | ~ NSClient++ | ✓ |
| Unified with deployment | ✓ Yes | ✗ SCCM separate | ✗ | ✗ | ✗ |
| Modern web UI | ✓ Blazor | ✗ Silverlight-era | ~ Dated | ~ Basic | ✓ |
| Real-time streaming | ✓ gRPC/SignalR | ~ Polling | ~ Polling | ~ Polling | ✓ |
| No SQL Server required | ✓ SQLite | ✗ SQL Server needed | ✗ DB required | ✓ | ✓ |
| Linux agent support | ✓ Native | ~ Limited | ✓ Yes | ✓ Yes | ~ Windows-first |
| Remote remediation | ✓ Built-in shell | ✗ | ✗ | ✗ | ~ Limited |
Architecture
No separate management servers, no SQL clusters, no dedicated site systems. Athena runs on a single Windows Server and scales horizontally when you're ready.
ASP.NET Core + Blazor
Single Windows Server
SQLite · No SQL Server
Certificate-based auth
gRPC bidirectional
Auto-rotate 60 days
~40MB · Windows & Linux
Manual / AD Discovery
Deploy · Monitor · Shell
Scans LDAP automatically
Builds endpoint inventory
No manual import needed
Downloads
Everything you need to deploy and monitor your environment. No installers phoning home, no activation servers, no internet required after download.
The lightweight endpoint agent. Deploy via manual install or AD Discovery push. Runs on Windows and Linux. Handles deployment execution, real-time monitoring, and remote shell.
Standalone executable that scans your Active Directory, maps OUs to machine groups, and imports directly into Athena. Run once or schedule via Task Scheduler.
All downloads are signed with Pantheon Systems code-signing certificate · SHA-256 checksums available
Our demo environment is live and pre-loaded with simulated endpoints, packages, and monitoring data. Explore the full platform in your browser.