Built for the moment recovery becomes the whole job.
CloudImage is a multi-tenant OS deployment platform for MSPs and direct customers. Every feature is designed for the frontline: cloud-native, hardware-agnostic, and safe for non-specialist hands to run under pressure.
Drag-together, unattended, and versioned.
Split cleanly across the WinPE offline phase and the first-boot online phase. Apply an image, inject drivers, install apps, Microsoft Office, registry tweaks, and Entra/Intune join - all as reusable steps you build once and share across every client.
- WinPE phase runs from boot media, fully offline
- First-boot phase runs online in the deployed OS
- Reseal to OOBE for Intune / Autopilot / domain join hand-off
- Per-tenant credentials, written to unattend at deploy
Platform - MSP - Tenant, in three tiers.
One library, three scopes. Platform content is curated centrally and shared to all. MSP content is your reusable library across every customer or internal team. Tenant content stays private to one organisation. Applications, driver packs, OS images, and scripts - all versioned, all deduplicated.
- OS images, applications, scripts, and driver packs
- Per-scope RBAC - no client leaks
- Deduplicated storage; upload once, deploy anywhere
Targeted by model. Matched to the hardware.
Packs are targeted by manufacturer and model (with wildcards) and matched automatically against the device's real hardware inventory; if nothing matches, Windows Update supplies drivers at first boot, so the deployment always completes.
- Manufacturer / model targeting with wildcards
- Matched against the device's real hardware inventory
- Windows Update fallback so first boot always completes
On-site imaging at LAN speed, no USB required.
An optional lightweight Windows service on a customer LAN. Runs on any Windows box - Server or client OS. It caches CloudImage content so the first device pulls each WIM, driver, and app from the cloud and every subsequent device on that LAN gets it at LAN speed. Enable Network Boot and it also boots devices straight into CloudImage WinPE over the network - no USB stick, no ISO, no WDS. Ideal for mass ransomware recovery.
- Lazy cache: fills as you deploy, no pre-seeding
- Devices discover it automatically - no rebuilt boot media
- Network Boot via iPXE, UEFI Secure Boot supported (Microsoft-signed chain)
- proxyDHCP - coexists with the customer's existing DHCP
Every step, every device, as it happens.
Real-time progress streams over SignalR. Watch a single machine or a whole office rebuild in parallel. Peer caching across the LAN means the image downloads once and the rest of the office pulls from a neighbour - bandwidth-friendly mass recovery.
- Per-device step timeline, live
- Peer caching across the LAN
- Self-updating WinPE agent - ship a fix once, every USB is current
See every customer's usage, spot upsell moments, and answer "who changed what" instantly.
Unique devices imaged vs contracted entitlement, with utilization % highlighted when it goes over - your upsell signal.
Success rate, deployments over time, top task sequences and top device models. 30-day, 90-day and 1-year views.
Answer 'who changed what' instantly. Filter by All tenants or a single customer.
Built for the buyers who ask hard questions.
CloudImage carries production-grade Windows images and Intune credentials for every customer you run. It's built accordingly.
Six role tiers scope what each user can see and do, per tenant. Content and secrets never cross tenants.
OS images, driver packs, and applications sit in encrypted storage. Sensitive credentials (e.g. Intune client secrets) are stored encrypted at rest.
Every USB, ISO or network-boot image carries a token tied to one customer. A device can only ever pull that customer's content.
CloudImage serves a Microsoft-signed WinPE boot chain, so devices boot without disabling Secure Boot or enrolling custom firmware keys.
Every action - content uploads, task-sequence edits, user changes, deployments - is recorded with who, when, and which tenant. Filter by All tenants or a single customer.
Built and supported from the UK by Aptaris Ltd. UK data residency.
On the roadmap. Not shipped yet.
Pre-built, best-practice sequences to start from.
Sign in to the portal with your Microsoft credentials, honouring MFA and conditional access.
Test in staging, then promote to production.
Tell us what you need. If it fits the platform, we'll add it to the roadmap.