The ITSM platform that proves itself.
Nexus is a self-hosted ITSM and security-operations platform with the full service lifecycle, CMDB, GRC and an AI copilot — and every engine proves it works with a built-in self-test.
Most ITSM is slideware until you're mid-migration
Platforms promise the world in a datasheet, then reveal the gaps once you've committed. Nexus takes the opposite stance: every capability is real, self-tested code, and the platform runs a whole-platform check against the live deployment — so what you see working, actually works. One platform spans service management and security operations on a shared model.
Datasheets over substance
Features that demo once and break in production erode trust. Nexus proves each engine with a hermetic self-test.
ITSM and security are split
Service and security teams work in separate tools with separate data. Nexus runs both on one model.
AI that's bolted on
A chatbot stapled to an old product helps little. Aria is grounded in your data and can act through governed, audited effectors.
The full service lifecycle, and then some
Incidents to changes to CMDB to GRC — plus security operations — as real, self-tested engines on one multi-tenant platform.
Service management
Incidents, service requests, problems with known-error and KCS, changes with a persisted CAB and change-risk gate, releases and SLAs.
CMDB / ITAM / SAM
Asset and configuration management, software recognition, effective licence position and audit-readiness.
Service catalogue & fulfilment
Multi-variable catalogue, an approval state machine and a fulfilment DAG that runs real provisioning effectors.
GRC
Framework import with continuous evidence, a full risk lifecycle, SoD intelligence and a compliance dashboard.
Aria AI copilot
Grounded, cited answers and a plan-act-verify loop with approval gates and real, audited privileged actions.
SecOps on the same model
SIEM, SOAR, threat intel, XDR and exposure management share the ITSM data model for one source of truth.
Self-hosted, multi-tenant, self-proving
Additive, versioned schema migrations; a whole-platform self-test that checks table, route, engine and connector coverage; strict tenant isolation; and no credential or URL exposure anywhere.
The platform asserts its own completeness — a whole-platform gate reports PLATFORM WHOLE — ALL GREEN on the live deployment.
One multi-tenant data model spans service management and security operations.
480+ capability engines, each with real algorithms and a hermetic self-test.
Custom and scoped RBAC, per-tenant feature flags and strict licence enforcement.
Aria grounds answers in your data and acts through governed, audited effectors.
A whole-platform check validates table, route, engine and connector coverage on the live build.
Admin area per org, Super-User area for the platform — role-enforced, no URL/secret exposure.
Proof instead of promises
Nexus validates itself two independent ways that agree — an authenticated validator that runs every self-test on the live system, and the platform's own whole-platform gate.
- Hermetic self-test on every engine
- Whole-platform green gate on the live deployment
- Additive, versioned, gated schema migrations
- Security re-sweeps returning zero findings
- Shared CMDB across service and security
- Aria copilot grounded in that shared data
- CREM exposure management on the same graph
- Multi-tenant, MSSP-ready, sovereign by default
One platform, two disciplines
Running ITSM and security operations on one data model ends the hand-offs: an incident, a change and a threat all see the same assets and the same truth.
A platform you can trust in production
For organisations that run IT and security as one
Run the whole service lifecycle
Incidents to changes to CMDB to GRC on one platform, with proof that every capability works.
End the tool hand-offs
Operate service management and security operations on one data model and one copilot.
Keep it inside the perimeter
Self-hosted, self-proving and credential-safe — built for environments that can't send data out.
Nexus ITSM — capability spec
| Capability | What you get |
|---|---|
| Scope | Incidents, requests, problems, changes+CAB, releases, SLAs |
| Assets | CMDB, ITAM, SAM with effective licence position |
| Catalogue | Multi-variable catalogue with fulfilment DAG |
| GRC | Framework evidence, risk lifecycle, compliance dashboard |
| SecOps | SIEM, SOAR, threat intel, XDR, CREM on one model |
| Copilot | Aria — grounded answers, governed audited actions |
| Assurance | 480+ engine self-tests; whole-platform green gate |
| Deployment | Self-hosted; multi-tenant; no URL/secret exposure |
Questions, answered
What makes Nexus 'self-proving'?+
Is it ITSM or security?+
What is Aria?+
Can I try it without installing anything?+
Is it suitable for MSPs?+
Watch a platform prove itself
Open the live Nexus console — no login — and see real ITSM and security operations running, every engine green.