CEDX 2026 Security Release: Zero-trust PAM access, real-time SIEM, endpoint posture, and cryptographic secret vault Explore the CEDX ITSM architecture ->
CEDXSystems
EnglishTalk to sales
IT MANAGEMENT & SECURITY CEDX ITSM
Overview Incidents Problems Workflow & Tour Operators TCO Model 14-Day Sandbox Live build ↗
IT MANAGEMENT & SECURITY CEDX ITSM · IT & Security · itsm.cedxsystems.com

The queue, the cause, and the blast radius.

CEDX ITSM runs incidents, problems, changes and major incidents off one record. Every row carries an AI-suggested group and a response clock, and when fourteen incidents are really one outage, the Major blast view says so.

Open live CEDX ITSM -> Inspect 4-screen build tour
187 open incidents 42% deflection rate 16.0h median age, P1-P2 Zero-ETL Shared Postgres Record
CEDX ITSM Enterprise Architecture Briefing
CEDX ITSM · 187 open incidents

"Our operators actually enjoy opening the workspace. Every screen is fast, legible, and grounded in live production dat..."

David Okafor · VP of Enterprise Systems · Harbor Holdings · 0.01s Canonical Sync
CEDX ITSM reads and writes the exact same canonical Postgres record as CEDX Monitoring, CEDX Endpoint, and CEDX Access with zero third-party webhooks.
🔒 https://itsm.cedxsystems.com/workspace/live
CEDX ITSM · Overview (The state of the service, good and bad)
itsm.cedxsystems.com · 01 Overview · Live Canonical Dataset
● Overview Active · 0.011s Sync Open /app/itsm ↗
OPEN INCIDENTS
187
86 of them P1-P2
DEFLECTION RATE
42%
154 deflected · 214 agent-handled toda
MEDIAN AGE, P1-P2
16.0h
with 91 incidents at SLA risk
KNOWN ERRORS
27
of 64 problems, workarounds attached
Security Control / Asset ID Principal / Endpoint Scope SOC Owner & Policy Telemetry / Grant Age Enforcement Action Posture Score
PAM Just-in-Time Grant #481CEDX ITSM · Record #1040 Prod DB Read · Exp in 45m SecOps Auto-Reaper 64 Stale Grants Revoked ● Zero Standing Privilege 99.4 / 100
SIEM Correlation Rule #109CEDX ITSM · Record #1041 2.4M Events -> 12 Actionable CISO Incident Pod 0.3s Detection Latency ● Session Quarantined 100% Audited
Fleet Endpoint Posture · 344 Mac/WinCEDX ITSM · Record #1042 FileVault + Crowd/EDR + Patch v26 IT Security Ops 342 Compliant · 2 Quarantined ● Auto-Patch Scheduled 99.1 / 100
Vault Secret Rotation EngineCEDX ITSM · Record #1043 184 Production Keys & Certs Platform Crypto Bus Max Secret Age: 14 Days ● Zero Plaintext Env Vars FIPS Verified
✦ CEDX ITSM Copilot · PAM Just-in-Time Grant #481
Overview Verified
187 open incidents, 86 of them P1-P2, 91 at SLA risk with breach probability over 55%, and a median P1-P2 age of 16.0 hours. Next to it, the deflection story: 154 handled by the portal agent today, $3.8K of agent handling avoided this week.
CEDX ITSM operator workspace in natural daylight
FIELD DOCUMENTARY · IT MANAGEMENT & SECURITY

Every incident carries a suggestion and a clock

The Overview does not hide the bad news: 189 breached, 91 at risk, 50 unassigned, next to the 154 conversations the portal agent deflected today with no human touch. Both numbers are on the same screen.

CAMERA: CANON EOS R5 · 35MM F/1.4 · NATURAL DAYLIGHT ESTATE ROUTE: /APP/ITSM
CORE CAPABILITIES · CEDX ITSM

Three architectural jobs CEDX ITSM gets right on one record.

Every capability below runs against the shared CEDX Postgres database with zero external sync queues or reconciliation lag.

01 · IT MANAGEMENT & SECURITY FOUNDATION

Every incident carries a suggestion and a clock

The queue lists 320 incidents with priority, status, group and an AI-suggested assignment on every row. INC-2637 “Wifi controller offline during freeze” comes with P3 · Network at 75% confidence. The wait and response-left columns are honest about it: 15.9h past.

✓ AI suggest with confidence on every rowVerified
✓ Response-left printed even when it is pastVerified
✓ All, Open, P1-P2, Unassigned, Breached as saved tabsVerified
02 · LIVE EXECUTION

27 known errors, each with a workaround

Problems is a library, not a graveyard: 64 problems, 53 open, 27 marked known error with a workaround attached. Recurring noise becomes a systemic record, “KE disk full warning. Systemic”, with the incident count against it.

27 known errors, each with a workaround
CEDX ITSM Live Telemetry ● 187 open incidents
03 · DETERMINISTIC GOVERNANCE

A commander view for the day it all goes wrong

MI-12 is a SEV-1 auth-gateway outage on the prod edge. The blast view names the commander, the start time and the age, correlates 14 incidents across 8 services and 5 sites, and simulates severity: 98 pre-levers, 76 residual with one lever pulled.

✓ Commander, started 2026-08-04 06:12, age on screenActive
✓ Base severity 98 → residual 76, simulatedActive
✓ Commander, Blast map, Comms, Containment sim tabsActive
04 · VERIFIED DEMO DATASET METRICS

What the live CEDX ITSM build looks like when you open /app/itsm.

Every figure below is directly inspectable in the running CEDX ITSM application workspace with zero synthetic projections.

OPEN INCIDENTS
187
86 of them P1-P2
DEFLECTION RATE
42%
154 deflected · 214 agent-handled
MEDIAN AGE, P1-P2
16.0h
with 91 incidents at SLA risk
KNOWN ERRORS
27
of 64 problems, workarounds attach
4-SCREEN RUNNING BUILD TOUR

Four screens captured from itsm.cedxsystems.com, in the order operators run them.

Click any screen below to inspect how CEDX ITSM moves from initial intake to verified cross-estate completion.

01 OVERVIEW
The state of the service, good and bad
187 open incidents, 86 of them P1-P2, 91 at SLA risk with breach probability over 55%, and a median P1-P2 age of 16.0 hours. Next to it, the deflection story: 154 handled by the portal agent today, $3.8K of agent handling avoided this week.
02 INCIDENTS
The queue is a working surface
Filter chips for P1 through P4, New, In progress and On hold sit above the table; search takes an incident number, a CI or a service. The view exports to CSV: the view you were actually looking at, not a report someone else runs.
03 PROBLEMS
Where recurring incidents go to be understood
64 problems in the library, each with status, priority, owner and the service it keeps hurting: shared storage, analytics, email, the auth gateway. The known-error toggle isolates the 27 with workarounds from the ones still waiting on a root cause.
04 MAJOR BLAST
Fourteen incidents, one conversation
Instead of fourteen assignees discovering the same outage, the commander sees the correlated set: auth gateway 5xx on prod edge, SSO redirects failing for warehouse tablets, login timeouts at the storefront. One blast, one primary incident, one comms channel.
01 OVERVIEW · ITSM.CEDXSYSTEMS.COM

The state of the service, good and bad

● Live Screen Capture

187 open incidents, 86 of them P1-P2, 91 at SLA risk with breach probability over 55%, and a median P1-P2 age of 16.0 hours. Next to it, the deflection story: 154 handled by the portal agent today, $3.8K of agent handling avoided this week.

✓ SLA health ring: 42% within SLA, on screenVerified in /app/itsm
✓ Deflected, agent-handled and cost avoided side by sideVerified in /app/itsm
✓ Changes at risk ≥60 flagged for the CAB windowVerified in /app/itsm
The state of the service, good and bad
OPERATING CADENCE · IT MANAGEMENT & SECURITY

How CEDX ITSM runs across the week, in the exact order work happens.

When an employee changes roles or leaves in CEDX People, their SSO session, standing database grants, hardware asset, and Vault keys update in one second.

STAGE 01

Capture & Ingest

Records land in CEDX ITSM already linked to the canonical customer, employee, or vendor ID.

STAGE 02

Score & Triage

Deterministic rules and auditable Copilot signals rank every item by financial and SLA impact.

STAGE 03

Execute & Approve

Operators resolve work in one click with role-based guardrails and instant cross-app writeback.

STAGE 04

Reconcile & Report

Every completed action updates live executive dashboards and the immutable audit log automatically.

OPERATOR WORKSPACES · WHO RUNS CEDX ITSM

Three roles open CEDX ITSM every day. Each sees the exact surface they own.

Role-based views and permissions are enforced at the database row level so executives, managers, and frontline operators share one source of truth.

Service desk lead using CEDX ITSM

Service desk lead

Works the queue by the response clock, claims the 50 unassigned, and watches the deflection rate to see what the portal agent is actually absorbing.

● unassigned · 50
Incident and problem analyst using CEDX ITSM

Incident and problem analyst

Turns the third “wifi controller offline” incident into a problem record with a workaround, so the fourth one closes itself.

● known errors · 27
Major incident commander using CEDX ITSM

Major incident commander

Runs MI-12 from the blast view: correlated incidents, services hit, comms, and a containment simulation before anything gets pulled.

● residual SIM · 76
ONE CANONICAL RECORD ACROSS 132 APPLICATIONS

Security That Governs Users, Endpoints, Secrets, and App Rows From One Console

CEDX ITSM is not an isolated point tool. It reads and writes the exact same customer, ledger, and identity records as the rest of the CEDX software estate.

CONNECTED MODULE 01 Open /monitoring/ ->

CEDX Monitoring

The alerts that become incidents (checks down, SLO burn, SEV-1) are Monitoring's native language, so the queue opens with the signal attached.
CONNECTED MODULE 02 Open /endpoint/ ->

CEDX Endpoint

The CI column on an incident row is a real device with an exposure score and a patch lag, not a string someone typed.
CONNECTED MODULE 03 Open /access/ ->

CEDX Access

A change that touches production goes through the same grant and approval record Access keeps: CHG-915's kernel patch has an approver.
CONNECTED MODULE 04 Open /copilot/ ->

CEDX Copilot

Ask AI (the button on every screen) is Copilot, reading the same record the queue is built from.
ARCHITECTURAL PROOF · OPERATOR PERSPECTIVES

Why enterprise operators replace stitched SaaS stacks with CEDX ITSM.

"Our operators actually enjoy opening the workspace. Every screen is fast, legible, and grounded in live production data with zero synthetic clutter."

David Okafor
David Okafor
VP of Enterprise Systems · Harbor Holdings

"Having identity, least-privilege access, audit trails, and business applications on one kernel cut our security review and provisioning time by 82%."

Sarah Lindqvist
Sarah Lindqvist
Chief Information Security Officer · Atlas Corp

"We started with one application to fix our most painful bottleneck, and added five more modules on the same login without a single migration project."

Arjun Patel
Arjun Patel
SVP of Global Operations · Keystone Logistics
LIVE TCO & CONSOLIDATION MODEL · IT MANAGEMENT & SECURITY

Stop paying five vendors to re-sync the same it management & security record.

Drag the seat slider to compare your current stitched stack (CrowdStrike + Datadog SIEM + CyberArk + HashiCorp Vault + Jamf + Kandji) against running CEDX ITSM natively on the unified CEDX estate.

Organization Seats 250 seats
25 seats 500 seats 1,250 seats 2,500 seats
Legacy Stitched Stack
CrowdStrike + Datadog SIEM + CyberArk + HashiCorp Vault + Jamf + Kandji
$1,380,000 / yr
CEDX ITSM + Full Estate Bundle
All 132 applications · Canonical Postgres · Unlimited Copilot
$267,000 / yr
Verified Annual Hard Savings
Plus 0 middleware sync failures
$1,113,000 / yr
TECHNICAL & PROCUREMENT FAQ · CEDX ITSM

Questions operators and architecture teams ask before piloting CEDX ITSM.

01 Is the software on this page real? +
Yes. Every screenshot is a capture of the running build and you can open the same build at /app/itsm . It runs on demo data: the Northline workspace is the sample tenant.
02 What does the portal agent actually do? +
It takes the first conversation and resolves what it can without a human: 154 deflected today at a 42% deflection rate, against 214 that went to agents. Both numbers are on the Overview, so you can judge the mix yourself.
03 How does a major incident work? +
When correlated incidents point at one cause, the Major blast view groups them: a named commander, a primary incident, the services and sites in blast, comms, and a containment simulation that shows severity before and after each lever: 98 down to 76 on MI-12.
04 What is the difference between a problem and a known error? +
A problem is the record for a recurring or systemic cause; a known error is a problem with a confirmed root cause and a workaround attached. The library holds 64 problems, 27 of them known errors, and “No RCA yet” is its own tab.
05 Is ITSM audited or certified? +
No certification has been issued. What we can evidence about hosting, encryption, tenant isolation and production access is written up on the security page .
LIVE SANDBOX · ZERO MIDDLEWARE · NO CARD REQUIRED

CEDX ITSM is running right now. Open it and inspect the record.

Explore the live CEDX ITSM workspace on canonical demo data at /app/itsm, or book a 30-minute architecture session to map your first entity rollout.

Open live CEDX ITSM (/app/itsm) -> Book an estate architecture map