Every Proxmox host you run, on one page.

proxmon is a dashboard you install on your own network. It lists every host down the side with its VMs and containers under it, watches them around the clock, and tells your phone when something needs you.

Ask for early accessSee what it watches

A guest that should be running stops. proxmon raises an alert, pushes it to your phone, and clears it on its own when the guest is back.

What it watches

proxmon reads each host through the Proxmox API every 30 seconds and keeps the last week of history. It needs no agent on your hosts.

Hosts
CPU and memory with 24-hour graphs, root disk, uptime, Proxmox version, and whether the host or just its API stopped answering.
VMs and containers
Status, CPU, memory, uptime, IP addresses from the guest agent, and the hardware from each guest's config.
Storage and disks
How full every storage is, SMART health, how much life your SSDs have left, and ZFS pool state.
Tasks and logs
Backups, starts, stops and migrations with their logs, and each host's live system log with a filter.
Alerts
A host down, a guest that should be running but isn't, storage filling up, a failing disk or worn-out SSD, a degraded ZFS pool, a failed backup. Pushed to your phone with ntfy, and cleared on their own when fixed.

Across your sites

Your hosts don't have to share a building. A Proxmox server at home, a rack at the office, a box in a colo: proxmon watches them all from one page, over a private encrypted network between your sites, with nothing opened to the internet.

proxmon across three sites proxmon at one site reaches Proxmox hosts at home, at the office and in a colo through an encrypted private network. Each host only exposes its API port to that network; nothing is reachable from the public internet. Your private network Tailscale or WireGuard, encrypted end to end Homepve-homeport 8006, private only Officepve-officeport 8006, private only Colopve-colo-1, pve-colo-2port 8006, private only proxmonon your network, or hosted by us
No port forwarding
Hosts are reached at their private addresses over the encrypted network. Port 8006 never has to face the internet.
Each host proves who it is
proxmon pins every host's certificate when you add it, so a machine pretending to be your host is refused, even inside the network.
Least access per host
Each host gets its own token: read-only by default, or exactly the power controls you allow. Never a password, never root.
Your network decides
With Tailscale, your own access rules say what proxmon can reach (port 8006 on your hosts, nothing else), and you can cut it off from your side at any time.

Hosted proxmon Planned

Rather not run it yourself? We'll run your proxmon for you, in our data center on redundant 100G links, and connect it into your tailnet.

  • One instance per customer. Your proxmon runs alone in its own sealed-off network segment. It can't see other customers, and they can't see it.
  • Nothing open to the internet. You reach your proxmon through your own tailnet. It accepts nothing from the public internet, and its outgoing traffic is limited to what it needs to work.
  • You hold the keys. Your Tailscale rules decide which hosts and ports it may reach. Remove it from your tailnet and it's cut off, immediately.
  • Read-only unless you say otherwise. Control features stay off until you turn them on per host, and every action is in your activity log.

Adding a host takes a minute

Click Add host and type the address you use for the Proxmox web page. The wizard walks you through the rest.

  1. Confirm it's your host

    proxmon shows the host's certificate fingerprint and how to check it. Once you confirm, it talks to that host and nothing pretending to be it.

  2. Name it

    Leave the name empty to use the node's own name, and add a site like Home or Office if you like.

  3. Give it access

    Enter the host's root password once and proxmon creates its own limited user and token, then forgets the password. Or copy a few commands into the host's shell and paste the token back.

  4. It checks the token

    proxmon tests what the token can do and refuses one with more access than it needs. The host shows up on the next poll.

Security

A tool that can see every server you run should be careful with that.

  • It runs where you choose. On your own network (a small VM, a container, or Docker) with nothing sent to us, or hosted by us in an isolated instance that only your tailnet can reach.
  • Read-only by default. A new host's token can look and can't change anything. Power controls are a separate step you take per host, and proxmon refuses any token with more access than you chose.
  • Two-step sign-in for everyone. Every account needs a password and an authenticator app code. Password reset by email still needs the code.
  • Pinned certificates. Each host's certificate is remembered, so a different machine at the same address is refused.
  • Encrypted secrets. API tokens and authenticator keys are encrypted in proxmon's database, and every sign-in and change is in an activity log.

Roadmap

proxmon is in early access. Monitoring and power controls work today; the rest comes one careful step at a time.

  1. Monitoring

    Hosts, guests, storage, disks, tasks, logs, phone alerts, the add-host wizard, accounts with two-step sign-in.

  2. Power controls

    Start, shut down, stop and reboot guests, with a typed confirmation and every action logged.

  3. Tailscale built in

    Connect proxmon to your tailnet from its settings to watch hosts at every site.

  4. Consoles

    A host's shell and each VM's or container's console in the browser.

  5. Snapshots and backups

    Take and roll back snapshots, back up a guest now, restore.

  6. Changes

    Adjust CPU, memory and disks, create guests from templates, move guests between hosts.

  7. Hosted proxmon

    Sign up and get your own isolated proxmon, run by us and connected to your tailnet. How it's kept separate.

Get early access

proxmon works with Proxmox VE 8 and 9. Tell us how many hosts you run and we'll be in touch.

Email support@proxmon.net