Squash, on your servers and workstations.

The Squash Endpoint Agent is an AI-native agent that runs on your endpoints. It lets Squash take action on those machines to resolve issues and handle work like patching, within the guardrails you set.

See it in action

Illustrative client

Acme Corp

Servers:3
Workstations:212
  • DC01Domain controller
  • EXCH01Exchange
  • RDS-02Remote Desktop
  • LT-0147Workstation

Ticket

Set up Priya Shah for Monday

Working
  1. DC01Create account in the Sales OU
  2. DC01Add to Sales and VPN groups
  3. EXCH01Create mailbox
  4. DC01Sync to Microsoft 365

Your technicians remote in for the same fixes every day.

Set up a new user in Active Directory. Restart the print spooler. Find what's filling the disk. Log off a frozen RDS session. Each one means finding the machine, opening a session, running the same checks, and writing it up. Your RMM can run a script, but a technician still has to pick it, run it, and read the result.

What Squash can fix on the machine.

Built-in tools for the tickets MSP technicians handle every day. Fixes wait for a technician's approval unless you set that tool to Always allow.

Workstations

Windows 10 and 11 laptops and desktops

  • My computer is so slow.
  • I'm out of disk space.
  • Outlook keeps crashing.
  • OneDrive stopped syncing.
  • The printer says it's offline.

Patching, software, and drivers

Windows Update, winget, MSI installers, and printer drivers

  • Install the pending Windows updates.
  • Update Chrome on my laptop.
  • Install Adobe Reader for the new hire.
  • Remove this program I didn't install.
  • The new printer driver won't install.

Domain controllers

Active Directory and Entra Connect

  • Set up our new hire for Monday.
  • Offboard Jordan today.
  • Add me to the Finance group.
  • My new account isn't showing up in Microsoft 365.
  • I'm locked out of my account.

Exchange servers

On-premises Exchange

  • Mail is stuck in the queue.
  • Give Sam access to the Billing mailbox.
  • Set up a shared mailbox for support.
  • Someone added a forwarding rule to my mailbox.
  • Who has access to the CEO's mailbox?

Remote Desktop and Citrix

Session hosts and brokers

  • My remote desktop session is frozen.
  • I can't print from the remote desktop.
  • Give Maria access to the remote desktop.
  • My RDP shortcut stopped working.

File servers

Shares, folder permissions, and home folders

  • I can't open the Finance folder.
  • My mapped drive is missing.
  • Give the new hire access to the Projects share.
  • Set up a home folder for the new hire.

From ticket to verified fix, on the machine.

Now you can delegate the work on the machine to Squash: regular health checks, fixes, patches, and confirming each one worked.

  1. 01

    Install

    Put the agent on the Windows machines you choose. It runs next to the RMM you already use.

  2. 02

    Investigate

    Squash checks services, event logs, disk, CPU, and permissions on the machine. Checks run on their own.

  3. 03

    Fix

    Squash runs the built-in tool for the job. Fixes wait for a technician's approval unless you set that tool to Always allow.

  4. 04

    Verify and log

    Squash checks that the fix worked and records every command, what it returned, and who approved it.

The facts are in the ticket before anyone remotes in.

Checks run on their own, so a technician who picks up the ticket starts with answers, not a blank remote session.

Slow computer

Which processes are using the CPU, memory pressure, disk speed, and a timeline of the slowdown.

Crash or error

Entries from the System, Application, and Security event logs around the time it happened.

Out of disk space

Free space on each drive, and the biggest folders and files.

Security check

Remote access tools, unsigned startup items, browser extensions, and Defender detections.

Any ticket

Who's signed in, network settings, internet access, recent installs, and whether a restart is pending.

A small, secure agent you can trust on every machine.

The agent stays out of the way, connects out only, and runs only jobs Squash has signed.

  • Small footprint

    About 50 MB of memory and almost no CPU when it's idle.

  • Outbound only

    Connects out over HTTPS. There are no inbound ports to open.

  • Signed jobs only

    Squash signs every job, and the agent checks the signature before anything runs.

  • Locked to one client

    Each device belongs to one client from the moment it's installed, and can't be moved.

  • Signed installs and updates

    The installer and every update are code-signed and checked. A failed update rolls back.

  • Every action recorded

    Each command, what it returned, and who approved it stay with the ticket. Secrets stay out of the logs.

Read about security at SquashExplore AI governance

Questions about Endpoint Agent.

Follow a ticket from first message to verified fix.

See how Squash gathers context, plans, acts, and checks its work on every ticket.

Explore ticket resolution