MSPs / MSSPs
Multi-tenant fleets under one license and org model - Client → Environment → Server.
CloFix One
AI SRE & DevOps Manager - your server, managed by chat.
Diagnose → Approve → Fix → Verify - with human control on every write. Full Linux server operations, Storage, backups, Incident & Change, and MSP-grade fleet control in one DevOps Manager.
Ask SRE · host: prod-web-01
Agent online
You
Nginx is returning 502 after the last deploy. Check services and fix safely.
CloFix One
Evidence: unit nginx failed · port 80 held by apache2 · upstream healthy.
Plan: stop apache2 → start nginx → verify HTTP 200. Risk: medium.
Capability: service.stop · service.start · validate.endpoint
Plan: stop apache2 → start nginx → verify HTTP 200. Risk: medium.
Capability: service.stop · service.start · validate.endpoint
Controlled run
Eight steps. One human gate.
Every write is allowlisted, risk-rated, and audited - from chat to postmortem.
01Chat
02Diagnose
03Analyze
04Propose
05Approve
06Execute
07Verify
08Postmortem
What is CloFix One?
DevOps Manager with Autonomous AI SRE at the center.
Operators talk to servers in natural language. CloFix One gathers real host evidence through an outbound agent, explains root cause, proposes a safe fix plan, waits for human approval, executes only allowlisted actions, and verifies the result - then drafts a postmortem.
No blind automation. No invented host state. No browser SSH for AI operations. AI proposes. Humans approve. Agents execute - only what’s allowed.
DevOps / SRE
Chat-first incident response with evidence IDs, approval gates, and full audit trails.
IT operations
Servers, services, storage, backups, websites, SSL, SSH, security, tickets, and wallboards in one UI.
Platform owners
Agents, dashboards, AI, GitOps, vault, and licensing together - one control plane.
Core pillars
What you can do with CloFix One
Autonomous AI SRE with human approval - plus a full DevOps platform in one pane of glass.
01 · Ask SRE
Chat-first full ops
~300 capabilities: Linux host ops plus Incident, Change, Backup/DR, Monitoring, Cloud, IaC, Deploy, Compliance, DB, and Team - slash menus, activity timeline, Approve cards.
02 · Fix Engine
Troubleshoot & fix
Probes → hypotheses → remediation → risk stamp → Approve → precheck → execute → verify desired state → postmortem.
03 · Services & Storage
Systemd + Storage explorer
Create/edit/delete unit files on the host via agent. Unified Storage (S3, MinIO, SFTP, FTP, WebDAV, agent path, Drive/OneDrive/Dropbox, Azure) with list/upload/download/move.
04 · Safe writes
Safe state change
Allowlisted start/stop/restart/reload, unit put/delete, packages, config backup→apply→rollback - still requires Approve. Token-metered license actions.
05 · Knowledge
Knowledge & config library
Org knowledge, cheat sheets, and approved patterns inform answers. Knowledge never executes on hosts.
06 · Agent
Outbound Go agent
Metrics, allowlisted shell, files, systemd units, Docker, K8s, packages, config apply, scripts, GitOps, log follow. Hosts connect out - no inbound SSH for AI.
Full DevOps platform
Fleet · AI SRE · Storage · Backups · GitOps · ITSM
Everything your DevOps Manager needs - not another single-purpose tool.
Infrastructure
Clients, environments, servers, database servers, services (systemd collect + unit create/edit/delete), file manager, terminal + command audit.
CloFix Storage
S3 / MinIO / R2 / Wasabi, SFTP, FTP/FTPS, WebDAV, HTTP, agent path, Google Drive, OneDrive, Dropbox, Azure Blob - explore, upload, download, mkdir, move, copy.
Backups & DR
File and DB jobs (Postgres/MySQL/MariaDB/Mongo/Redis): one DB or all, full / schema / data dumps. Destinations: local, SFTP, S3, or CloFix Storage. Pipeline stages + history.
Observability
Thresholds, alerts (ack / silence / escalate), logs, website uptime, domains, SSL expiry windows (30 / 14 / 7 / 0).
Automation
Scripts, scheduled jobs, workflows, config templates, Step Library, and builds.
Deploy · Cloud · IaC
Deployments, GitOps (GitHub/GitLab/Bitbucket PAT), Docker, Kubernetes, cloud accounts, Terraform plan/apply/drift.
SSH center
Sessions, attacks, auth events, users, keys, policies, service management, alerts, audit.
Security & VAPT
Security Hub presets plus VAPT Lab with PDF / JSON / CSV reports. Hardening playbooks.
ITSM & Change
Incidents, RCA/postmortems, change request/preview/rollback, Kanban tasks, reports, Operations Center wallboard.
Secrets
Vault, credential vault, rotation/expiry awareness, temporary password share - never logged in plaintext.
Admin & licensing
Users, RBAC, audit logs, seat licensing + metered action costs (services, storage, backups, SRE) - Free → Enterprise / MSSP.
Ask SRE Chat
Full Linux ops + Incident/Change/DR/Monitoring/Infra/Cloud/IaC/Deploy/Compliance/Capacity/DB/Team - Approve on every write.
Autonomous AI SRE
Fix incidents in conversation - with proof, not guesses.
Real probes via the online agent. Structured plans. Human Approve on every write. Linux treated as full server operations.
- Incident diagnose
- Live probes: metrics, logs, services, ports, failed units, processes, local HTTP / DNS / TLS checks.
- Root-cause & evidence
- Hypothesis ranking with confidence, cited evidence, timeline, and impact analysis.
- Linux full server ops
- Service, package, process, system, user, file/dir, disk, network, firewall, SSH, logs, cron, env, security, web, Docker, storage, scripts, config lifecycle, diagnostics.
- Systemd unit CRUD
- Create / edit unit files under
/etc/systemd/system; delete stops → disables → removes file → UI cleanup. - Fix plans
- Allowlisted steps only; risk stamped LOW → CRITICAL; capability registry (~300 ops).
- Human Approve
- Every write waits on Approve / Reject before the agent acts - including emergency remediation.
- Execute & verify
- Prechecks, live activity timeline, verify desired state, rollback paths, postmortem draft.
- Platform workflows
- Incident/Change/Backup-DR, Monitoring & alerts, Infra/Cloud/IaC, Secrets, Deploy, Compliance, Capacity, DB, Team ops.
- Guardrails
- Jailbreak / destructive-intent guard. Dual allowlists on API and agent. Metered license actions.
Operations matrix
One SRE chat. Full fleet coverage.
Ask SRE understands Linux host work and platform workflows - same Approve gate, same audit trail.
- Incident & Recovery
- Create / update / close · severity · timeline · evidence · RCA · impact · recovery · emergency remediation · notes · summary · postmortem.
- Change Management
- Request · preview · impact · dependency · pre-validate · execute · history · config diff · auto backup · rollback · verify.
- Backup & Disaster Recovery
- Create / restore / verify / integrity · restore testing · snapshots · RPO · DR workflow · readiness · DB full/schema/data dumps.
- Monitoring & Alerting
- Server/service/resource health · alert create/ack/suppress/escalate/correlate · alert→incident · anomaly · baseline.
- Infrastructure · Cloud · IaC
- Inventory, grouping, environments, topology · cloud VM lifecycle, SG/network/storage, cost · Terraform plan/apply/drift/state.
- Secrets · Validation · Deploy
- Rotation/expiry/exposure · config/endpoint/DNS/TLS/DB smoke tests · blue/green, canary, rollback, release notes.
- Compliance · Intel · Capacity
- Baselines, audit evidence, drift reports · knowledge troubleshoot, runbooks · CPU/memory/storage trends, SLO/error budget.
- App / API · Database · Team
- Endpoint/TLS/DNS/error investigation · DB health, replication, slow queries · tasks, approvals, maintenance windows, handover, ops reports.
- Storage explorer
- Browse CloFix Storage connections; use as backup destinations; vault-backed credentials.
Safety & governance
Reads are live. Writes wait for you.
Built for MSPs and regulated fleets that cannot risk silent automation.
Human Approve for writes
Restarts, stops, unit file put/delete, config edits, packages, storage deletes, backups, workflows, scripts.
Dual allowlists
API and Go agent both reject forbidden commands and units.
Config six gates
Path allowlist · size/diff · syntax · human diff · backup+atomic write · verify + rollback.
Hash-chained audit
AI runs, terminal, config apply/rollback, and platform actions stay attributable.
Knowledge never executes
RAG / library / articles inform planning only - never run on the host.
Online agent required
Offline hosts are not “faked healthy” or silently fixed.
Architecture
How CloFix One works
The dashboard never SSHs into hosts for AI SRE. Agents enroll and keep a persistent outbound connection.
Browser · CloFix One dashboard
▼ HTTPS / API
CloFix API
▲ outbound WebSocket
CloFix Agent · on each Linux server
License plans: Free → Person → Standard → Team → Enterprise / MSSP · metered action costs for SRE, services, storage, and backups
Why CloFix One
Compared to what you use today
vs chatbots
Talks to real hosts via agent and cites probe evidence - not invented status.
vs raw SSH scripts
Approval gates, mutex awareness, config rollback, and a hash-chained audit trail.
vs ticketing-only ITSM
Diagnose and remediate in the same controlled run - then file the postmortem.
vs single-purpose APM
Fleet + AI SRE + Storage + Backups/DR + Security Hub + VAPT + GitOps + Terraform in one DevOps Manager.
FAQ
CloFix One frequently asked questions
Straight answers for teams evaluating AI SRE and DevOps Manager platforms.
What is CloFix One?
CloFix One is a DevOps Manager with Autonomous AI SRE at the center. Operators chat with Linux servers; CloFix One gathers host evidence through an outbound agent, proposes a safe fix, waits for human approval, executes allowlisted actions, and verifies the result.
Does CloFix One change servers without approval?
No. Reads are live, but every write-restarts, unit changes, packages, config edits, storage deletes, backups, and scripts-requires human Approve. Dual allowlists on the API and agent reject forbidden commands.
How does Ask SRE connect to Linux hosts?
A lightweight outbound Go agent enrolls on each Linux server and keeps a persistent connection. The dashboard never SSHs into hosts for AI SRE operations.
Who is CloFix One built for?
MSPs/MSSPs, DevOps and SRE teams, IT operations, and platform owners who need multi-tenant fleet control, chat-first incident response, storage, backups, GitOps, and ITSM in one pane of glass.
What can you manage with CloFix One?
Linux full server ops, systemd unit CRUD, CloFix Storage, database backups and DR, observability, GitOps, Terraform, SSH center, Security Hub and VAPT, Incident/Change ITSM, secrets vault, and Ask SRE chat with about 300 allowlisted capabilities.
Next step
Operate your fleet by chat with CloFix One
CloFix One is the DevOps Manager from CloFix - Linux full ops, Storage, DB backups, Incident & Change, every write allowlisted, risk-rated, and audited. Request a demo of Ask SRE on your stack.