Every Proxmox host you run, on one page.

What it watches

proxmon reads each host through the Proxmox API every 30 seconds and keeps the last week of history. It needs no agent on your hosts.

Hosts

CPU and memory with 24-hour graphs, root disk, uptime, Proxmox version, and whether the host or just its API stopped answering.

VMs and containers

Status, CPU, memory, uptime, IP addresses from the guest agent, and the hardware from each guest's config.

Storage and disks

How full every storage is, SMART health, how much life your SSDs have left, and ZFS pool state.

Tasks and logs

Backups, starts, stops and migrations with their logs, and each host's live system log with a filter.

Alerts

A host down, a guest that should be running but isn't, storage filling up, a failing disk or worn-out SSD, a degraded ZFS pool, a failed backup. Pushed to your phone with ntfy, and cleared on their own when fixed.

Across your sites

Your hosts don't have to share a building. Servers at head office, a rack at a branch, a cage in a colo: proxmon watches them all from one page, over a private encrypted network between your sites, with nothing opened to the internet.

No port forwarding

Hosts are reached at their private addresses over the encrypted network. Port 8006 never has to face the internet.

Each host proves who it is

proxmon pins every host's certificate when you add it, so a machine pretending to be your host is refused, even inside the network.

Least access per host

Each host gets its own token: read-only by default, or exactly the power controls you allow. Never a password, never root.

Your network decides

With Tailscale, your own access rules say what proxmon can reach (port 8006 on your hosts, nothing else), and you can cut it off from your side at any time.

Hosted proxmon Planned

Rather not run it yourself? We'll run your proxmon for you, in our data center with geographically diverse connections, and connect it into your tailnet.

• One instance per customer. Your proxmon runs alone in its own sealed-off network segment. It can't see other customers, and they can't see it.
• Nothing open to the internet. You reach your proxmon through your own tailnet. It accepts nothing from the public internet, and its outgoing traffic is limited to what it needs to work.
• You hold the keys. Your Tailscale rules decide which hosts and ports it may reach. Remove it from your tailnet and it's cut off, immediately.
• Read-only unless you say otherwise. Control features stay off until you turn them on per host, and every action is in your activity log.

Adding a host takes a minute

Click Add host and type the address you use for the Proxmox web page. The wizard walks you through the rest.

1. Confirm it's your host

   proxmon shows the host's certificate fingerprint and how to check it. Once you confirm, it talks to that host and nothing pretending to be it.

2. Name it

   Leave the name empty to use the node's own name, and add a site like HQ or Branch if you like.

3. Give it access

   Enter the host's root password once and proxmon creates its own limited user and token, then forgets the password. Or copy a few commands into the host's shell and paste the token back.

4. It checks the token

   proxmon tests what the token can do and refuses one with more access than it needs. The host shows up on the next poll.

Security

A tool that can see every server you run should be careful with that.

• It runs where you choose. On your own network (a small VM, a container, or Docker), where the only thing it sends us is a daily update check with your license key and version number, or hosted by us in an isolated instance that only your tailnet can reach.
• Read-only by default. A new host's token can look and can't change anything. Power controls are a separate step you take per host, and proxmon refuses any token with more access than you chose.
• Two-step sign-in for everyone. Every account needs a password and an authenticator app code. Password reset by email still needs the code.
• Pinned certificates. Each host's certificate is remembered, so a different machine at the same address is refused.
• Encrypted secrets. API tokens and authenticator keys are encrypted in proxmon's database, and every sign-in and change is in an activity log.

Roadmap

proxmon is in early access. Monitoring, power controls, Tailscale and consoles work today; the rest comes one careful step at a time.

1. Monitoring

   Hosts, guests, storage, disks, tasks, logs, phone alerts, the add-host wizard, accounts with two-step sign-in.

2. Power controls

   Start, shut down, stop and reboot guests, with a typed confirmation and every action logged.

3. Tailscale built in

   Connect proxmon to your tailnet from its settings to watch hosts at every site.

4. Consoles

   A VM's screen and serial port, a container's console and the host's shell, in the browser. The host shell still asks for a Linux login.

5. Snapshots and backups

   Take and roll back snapshots, back up a guest now, restore.

6. Changes

   Adjust CPU, memory and disks, create guests from templates, move guests between hosts.

7. Hosted proxmon

   Sign up and get your own isolated proxmon, run by us and connected to your tailnet. How it's kept separate.

Pricing

One meter for everything: a sensor is one thing watched, such as a switch port's traffic, a server's CPU, a VM, a disk or a website check. Every plan has every feature; you choose how many sensors you need.

Prices in US dollars, before tax, billed yearly. Counting works the way you'd expect from other monitors: one sensor per interface, CPU, memory, disk, guest or check. Online checkout isn't open yet: choose a plan in the request form below and we'll follow up by email about payment. If a paid plan ends, your license continues on the Free plan. Every download is under the End User License Agreement, which you accept once at proxmon.net/accept after your access is approved. Today proxmon watches Proxmox hosts and web services; SNMP devices (switches, routers, UPSs and anything else with SNMP) are the next release, and the plans above already cover them.