West Indies Technology Solutions

One NOC for every site you keep online.

Pulse by wiTech is the monitoring, alerting, and secure remote-access platform behind West Indies Technology Solutions — one master dashboard across every client, a private portal for each, and a collector appliance at every site connected by an outbound-only tunnel.

  • Zero inbound ports at the site
  • Rides out a dropped uplink
  • One box per site

Built for island realities

Monitoring that survives Caribbean infrastructure.

Unreliable links

The collector buffers telemetry to a bounded on-disk queue when the uplink drops and resumes where it left off once it is back. A storm-season outage costs you a gap in history, not your data.

Hot, unattended closets

Hardware is chosen for the closet it lives in — thermals, microSD wear, PoE — from a Raspberry Pi to a sealed fanless x86 appliance rated for a room you cannot revisit for a year.

Sites a boat ride away

Every site dials out to the platform. There is nothing to port-forward and no inbound port to expose — one box to ship, enrol once, and watch from Charlotte Amalie to Christiansted.

The platform

Everything the NOC needs, in one place.

One multi-tenant platform covers the full lifecycle — from the first discovery sweep of a new site to the incident review after an outage.

Master NOC dashboard

Every client, site, circuit and device on one live board. Status changes stream in over SSE as they happen — with a wallboard mode for the operations screen.

Tenant-isolated portals

Each client sees only their own estate, in plain language tuned to who is looking — executive, operations, or engineering detail.

Live site & device health

Reachability, latency, SNMP and interface health per device, rolled up to a health score for the whole site.

Alerts, incidents & SLA

Multi-sample checks with hysteresis raise alerts, correlate into incidents, and run SLA clocks you can report against.

Asset discovery

Sweep a site, review the candidates, approve what is real. Inventory stays current without hand entry.

Secure remote access

Open a browser terminal or session to a client device through the same tunnel — scoped, time-boxed, and fully recorded to the audit log.

Customer status pages

Publish a public or private status page — on the client’s own domain — driven by the same signals your NOC watches.

Reports & audit trail

Scheduled PDF and CSV reports, and a hash-chained audit trail an auditor can independently verify.

The collector appliance

One small computer per site. It dials out.

A collector runs in Docker on a board sized to the site and opens a single outbound WSS tunnel home — TLS out to the platform, nothing in. It watches the local network and becomes your secure jump host into it. Every command the platform sends is Ed25519-signed and checked against a pinned key before the collector acts.

Raspberry Pi to x86. From a Raspberry Pi for a standard site to a fanless Intel N100 appliance on an inline span port — the hardware catalog carries the field caveats that decide each deployment.

Outbound-only. The site exposes no inbound ports. A one-time enrolment token binds the box to its tenant and site; its credential auto-renews at half-life.

From the collector hardware catalog

Raspberry Pi 5Raspberry Pi CM4Radxa ROCK 5BIntel N100 · 4× 2.5 GbEODROID-H4+

Customer site

Collector
  • Firewall
  • Core switch
  • Servers · UPS
  • Access points
WSSout only

Pulse by wiTech

TLS · :8446
  • Signed commands
  • Fleet state
  • Metrics & events
  • Session broker

Deployment profiles

edge-smalledge-standardedge-largeinline

Security

Secure by construction, not by policy.

Outbound-only tunnels

Customer sites expose no inbound ports. The collector dials out; the platform has a single inbound port.

Tenant isolation in the database

Postgres row-level security scopes every query to the caller’s tenants, deny by default — enforced under the data, not just in the UI.

Encrypted device credentials

Device secrets are envelope-encrypted at rest and decrypted only in memory for a session. No API ever returns them.

Signed collector commands

Every server-to-collector command is Ed25519-signed with a monotonic sequence and verified against a pinned key; replays are rejected.

Hash-chained audit

Every consequential action is written to a tamper-evident audit trail that an auditor role can verify end to end.

MFA & rate-limited auth

TOTP with recovery codes for privileged roles, brute-force lockout with backoff, secure cookies, and a nonce-based CSP.

Sign in to Pulse by wiTech.

For WiTech engineers and clients. Access is by invitation — sign in with your account to reach your dashboard or portal.