Outbound-Only Windows Agent
One small service per server, installed with one command, talking out over HTTPS.
The SERVERMON agent runs on each Windows server as a LocalSystem service and collects its readings locally. Every request it makes is outbound and signed, so no inbound port, VPN, or stored domain credential is needed. The install is a single command, which means it can be rolled out through GPO, Intune, or whichever RMM tool you already use, and new servers wait for an admin to approve them before they appear.
Monitoring that your security team can sign off without opening the firewall.
