Endpoint Management Platform

Manage every Windows device from a single dashboard.

Deploy software, monitor screens, provide remote assistance, and automate IT operations — purpose-built for school labs and enterprise IT.

Heartbeat every 5s
5 Agent Components
.NET 8 + FastAPI
Open Source
🔒 panel.pashacore.com.tr
POps Dashboard
Transparent Remote Assistance
Immutable Audit Logs
User-Aware Monitoring
Built for Education & Enterprise

See POps in Action

🔒 panel.local
POps Dashboard
Dashboard
Dashboard
Devices
Devices
Vision
Vision
Deploy
Deploy
Labs
Labs
Logger
Logger
Why POps?

Traditional tools weren't built for transparency

Traditional Tools
POps
Hidden monitoring
Transparent — users are notified
Limited audit trail
Immutable, timestamped audit logs
Separate tools
Unified platform
Manual inventory
Automatic device identity (HWID)
No user awareness
Session notifications & consent
Overview

One agent architecture. Five components. An entire lab, accounted for.

POps is an end-to-end Endpoint Management and Monitoring Platform, purpose-built for school computer labs and enterprise environments. It brings remote desktop control, agent-based real-time telemetry, policy management, software deployment, and security isolation together under one operations layer.

Five components, installed on every endpoint — POpsAgent, POpsTray, POpsVision, POpsWatchdog, and POpsUpdater — talk to each other over a Named Pipe, and to the server over WebSocket tunnels. The result: an IT team that can see the state of every machine in the lab within seconds, from a single console.

5
Agent components / endpoint
12+
API module groups
5s
Heartbeat interval
3
WebSocket channels
Maintained by

Pasha

POps is designed and actively maintained by Pasha, built to make in-house IT management effortless across school computer labs.

FastAPI · PostgreSQL · .NET 8 · PHP
Agent Architecture

Five components. One dual-socket architecture.

Agents installed on every endpoint talk to the server over two separate WebSocket sockets: one for commands and telemetry, another for the screen-capture tunnel. Data lands in PostgreSQL and surfaces in the web panel in real time.

Windows Device POps Agent WebSocket FastAPI Server Python PostgreSQL Database Web Panel PHP Dashboard
01 / POpsAgent

Core Background Service

Runs as a .NET 8 BackgroundService, installed as a Windows Service. Opens a persistent WebSocket tunnel to the server, sends a heartbeat every 5 seconds, and reports CPU, RAM, disk, and active-window data.

↳ WebSocket /ws/agent/{hw_id}
02 / POpsTray

System Tray Agent

Runs visibly or silently in the user session. Surfaces connection status and quarantine notices, and manages kiosk mode and the admin bypass flow.

↳ Named Pipe (POpsTrayPipe)
03 / POpsVision

Screen-Capture Tunnel

Captures the screen as JPEG frames and streams them to the server, powering live monitoring, grid view, and remote mouse and keyboard control from the panel.

↳ WebSocket /ws/vision/{pc_name}
04 / POpsWatchdog

Guardian Process

Runs in the user session via a scheduled task. Supervises the POpsAgent service and restarts it automatically if it goes down.

↳ schtasks · local monitoring
05 / POpsUpdater

Automatic Updater

Checks the server for the latest agent version, downloads the package, stops the service, replaces the files, and restarts — no manual intervention required.

↳ GET /api/latest_update
Features

Unmatched Visibility & Control

Software Deployment

Deploy and orchestrate software installations across your entire fleet instantly. Supports silent installations, custom ZIP packages, and MSI deployments with precise storage tracking.

ZIP / MSI / EXE
Mass Orchestration
Deploy

Hardware Inventory

Automatically identify and track devices using immutable Hardware IDs (HWID). Monitor CPU, RAM, and disk usage in real-time without relying on fragile hostnames.

Real-time Telemetry
Automatic HWID
Devices

Remote Assistance (Vision)

Provide instant support with POpsVision. Features dynamic 1-5 FPS adjustable streaming, remote keyboard/mouse control, and user session notifications for privacy compliance.

Remote Control
Privacy Aware
Vision
Developer First

Extensible via REST API

Automate tasks, integrate with existing ITSM tools, or build your own dashboards using our comprehensive FastAPI backend.

POST /api/device/lock
curl -X POST https://api.pashacore.com.tr/device/lock \
-H "Authorization: Bearer $POPS_TOKEN" \
-d '{"hwid": "DEV-8472", "reason": "Security breach"}'

// Response
{
  "status": "success",
  "action": "network_quarantine_enforced"
}
GET /api/tasks
curl -X GET https://api.pashacore.com.tr/tasks?status=active \
-H "Authorization: Bearer $POPS_TOKEN"

// Response
{
  "tasks": [
    { "id": 104, "type": "msi_deploy", "progress": 85 }
  ]
}
Security Model

Security built at the network layer

POps' approach starts at the network layer — no keylogging, no keystroke capture, ever. Isolation, identity, and audit trail are handled by three independent mechanisms.

🔓 Open Source
📜 Apache 2.0
🏗️ Built in Public
🛡️ Transparent by Design

HWID Fingerprint

A unique hardware ID is computed for every device and stored locally.

SHA256(MachineName+DiskSerial+MacAddress+BIOS_UUID)

Network Quarantine

When the violation threshold is crossed, netsh advfirewall halts all traffic — only the server address stays reachable.

Bypass Token

A 6-digit, TOTP-style token generated in the panel can be entered on the agent to lift isolation.

Kiosk Mode

A full-screen lock form — opened by a lockdown command, removed by an unlock command.

DNS Filter

The blocked-category list refreshes every minute; crossing the violation count triggers automatic quarantine.

JWT Access

Access to the web panel is protected end-to-end by JWT tokens, with sessions verified server-side.

Audit Logs

Every admin action, agent event, and policy violation is written to the agent_logs_v2 table.

Acceptable Use Policy

Shown to users at session start when defined on the server; can be disabled from the panel.

logger.php — live event stream
14:02:11 infoLAB-A-07 agent.heartbeat.ok
14:02:44 mediumLAB-B-12 dns.violation — category: gambling
14:03:02 highLAB-B-12 policy.threshold.exceeded
14:03:03 criticalLAB-B-12 agent.kiosk.lockdown — automatic quarantine engaged
14:06:19 infoLAB-A-03 usb.device.connected
14:07:51 infoLAB-B-12 agent.bypass.token.accepted — quarantine lifted
Web Panel

Single-pane management, protected by JWT

A PHP-based management interface that brings devices, labs, live view, terminal, logs, and policy management together in one console.

🔒 panel.example-school.local/devices.php
POps Device Management

Lab Overview

Live
142
Active devices
38%
Avg. CPU
3
Quarantined
6
Labs
LAB-A-01online
LAB-A-02idle
LAB-B-12quarantined
LAB-C-05online
Installation

Server and agent setup in a few steps

The server runs on Python + FastAPI + PostgreSQL; the agent runs on .NET 8. The steps below are a quick-start reference.

Server Setup

Python 3.11+
PostgreSQL 14+
FastAPI · Uvicorn
bash
cd Yama/Back-End python -m venv venv venv\Scripts\activate pip install -r requirements.txt createdb pashacore_db uvicorn server:app --host 0.0.0.0 --port 8000

Agent Setup

Windows 10/11 x64
.NET 8 Runtime
Administrator privileges
powershell
dotnet publish POpsTray\POpsTray.csproj -c Release -r win-x64 --self-contained false dotnet publish POpsAgent\POpsAgent.csproj -c Release -r win-x64 --self-contained false powershell -ExecutionPolicy Bypass -File Install-POpsAgent.ps1
Roadmap

What's next

Where the platform is headed next.

v1.0 — Current Release

Dashboard & System Overview
Device Management & Inventory
Computer Lab Organization
POpsVision (Remote Desktop)
Remote Terminal
Software Deployment Engine
Policy & Quarantine System
Immutable Audit Logging
Kiosk Mode & Bypass Tokens
FAQ

Frequently Asked Questions

Does POps have a keylogger?

Absolutely not. POps is designed with privacy and transparency in mind. It does not record keystrokes and notifies the user whenever an active remote session is initiated.

Is it open source?

Yes, the core components are open source under the Apache 2.0 license, allowing you to self-host and verify the security model yourself.

What environments are supported?

Currently, the agent is built for Windows (school labs, enterprise endpoints). The backend runs on Linux (Docker) with PostgreSQL.