Self-hosted. Privacy-first. Groundskeeper brings your entire school IT estate—26 connectors, local AI, instant alerts—into a single dashboard. Your data never leaves your network.
[INFO] Loading config.yaml...
[INFO] 26 connectors registered
[OK] Ollama reachable — llama3.1:8b
[OK] Scheduler started — all connectors active
[OK] Licence valid — Standard tier
[INFO] Dashboard at http://localhost:8000
[READY] Groundskeeper is watching
Core Pillars
A chronological, deduplicated event stream across all your connectors. Criticals surface immediately with instant email or Teams alerts. OK events suppressed for 60 minutes so you see what matters, not what's chattering.
Runs entirely on your server via Ollama. No data leaves your network. Hit “Why?” on any alert for a plain-English explanation. Morning summaries auto-generated every 5 minutes. Also works via Azure OpenAI, Anthropic Claude, Google Gemini, or OpenAI.
A read-only traffic-light dashboard for Senior Leadership Teams. No jargon, no noise—just red/amber/green for each service area. Instant load, no AI dependency. Safe to share with a headteacher.
Critical events trigger immediate email alerts with quiet hours support so you're not paged at 2am for a non-issue. Teams and Slack webhooks also supported for channel notifications.
Multi-Academy Trust dashboard aggregates traffic-light status across all schools into a single trust-wide view. Each school keeps its own self-hosted instance—no central cloud dependency.
Maps all five Cyber Essentials technical controls to live data from your connectors. RAG status per control. Built-in evidence trail for CE assessments. No extra tooling required.
Connector Ecosystem
Read-only connectors that never modify your systems. GDPR-friendly—data stays on your network.
GKAgent
A lightweight PowerShell agent deployed to Windows client machines via Group Policy. Checks in every 5 minutes, reporting health data back to the Groundskeeper dashboard. No WinRM, no third-party agent framework—just a signed installer and a GPO.
GPO Deployment
Windows Installer
The Groundskeeper Windows installer bundles everything—Python runtime, all dependencies, NSSM service wrapper. Run the wizard, click Next three times, and your school estate is being monitored. Uninstall cleanly from Add/Remove Programs.
Groundskeeper Setup
Project Roadmap
FastAPI backend, APScheduler, SQLite, pluggable AI (Ollama, Azure, Anthropic, Gemini, OpenAI), full settings UI, first-run setup wizard, SLT traffic-light view, Windows service via NSSM. 26 connectors covering cloud services, infrastructure, security, hardware, AD hygiene, and school-specific monitoring.
Lightweight PowerShell agent deployed via GPO. NSSM-managed service with Inno Setup installer. Reports BitLocker, Defender, firewall, local admins, Windows Update compliance, SMART disk health, BSOD events, battery health, and exam marking software detection.
Immediate critical alerts with quiet hours. Teams/Slack webhooks. Cyber Essentials compliance dashboard. MAT hub-and-spoke view. Licence key system with four tiers (Ed25519 offline verification + Cloudflare call-home). Windows installer. GitHub Actions CI/CD for automated release builds.
Independent security audit completed with all critical findings resolved. PowerShell injection eliminated codebase-wide via safe execution helper. GKAgent auto-update hardened with HTTPS enforcement, host pinning, SHA-256 verification, and Authenticode checking. Auth middleware first-run bypass removed.
Edugeek community launch. Autumn school budget cycle. Weekly email digest. Scheduled AI health reports.
Jamf School MDM, Entra Connect heartbeat, Smoothwall / Lightspeed filtering appliances, InVentry / Sign In App, PaperCut MF, Paxton door access, Synology / QNAP NAS, hardware warranty lookup.
Pricing
Community Edition is free forever. Paid tiers unlock more connectors, priority support, and trust-wide features.
Community
Sign in with your Microsoft account to suggest and upvote connectors and features. Your school’s priorities drive the roadmap.
Running Smoothwall? PaperCut? Paxton? Tell us which system you’d most like Groundskeeper to monitor. Vote on suggestions from other schools to push the most-wanted connectors up the build queue.
Got an idea for the dashboard, alerts, AI, or reporting? Submit it here and let the community vote. The highest-voted requests feed directly into the next release planning cycle.
Votes are authenticated via Microsoft account — one vote per person, no farming.
Groundskeeper runs on Windows Server 2022 with Python 3.12. Browse the source, read the docs, or download the latest release.