Moorfox
Moorfox vs Tactical RMM
Choose Tactical RMM if self-hosting is the point: you want the data on your own server, no per-device fees, and you are happy operating and upgrading the stack yourself.
Choose Moorfox if you want the same lightweight spirit without running the infrastructure: a hosted control plane, first-party encrypted remote access, quick support, and an agent that updates and heals itself.
Tactical RMM is a self-hosted, source-available RMM with a strong scripting culture and MeshCentral providing remote access. You run the server yourself, and agent code signing is available to sponsors.
At a glance
| Moorfox | Tactical RMM | |
|---|---|---|
| Remote desktop | ✓ Built in: end-to-end encrypted, peer-to-peer where the network allows | ✓ Via MeshCentral, which Tactical deploys alongside itself |
| Attended quick support | ✓ Built in: portable download, nine-digit code, nothing installed | ≈ Possible through MeshCentral, with more moving parts |
| Terminal and file manager | ✓ Built in, running as SYSTEM or root, headless servers included | ✓ Remote shell and file browser via agent and Mesh |
| Scripting and automation | ✓ Saved commands plus multi-step flows with triggers | ✓ Excellent: scripting is Tactical's strongest suit |
| Patch deployment | ≈ Built in for Windows and Linux: weekly windows in each device's own timezone, a first-seen deferral, approve and block overrides; third-party apps via winget, best effort | ✓ Windows Update management built in |
| Monitoring and alerts | ✓ Org-wide thresholds for CPU, memory, disk, offline and crashes; emails routed per tag | ✓ Checks, thresholds and alerting built in |
| Security posture score | ✓ Every device scored out of 100 across fourteen factors, honest about what it could not measure | ✗ No per-device security score |
| Hardware and software inventory | ✓ Deep: down to BIOS, GPUs and individual memory modules | ✓ Hardware and software inventory |
| Audit log | ✓ Append-only activity log; entries cannot be edited or removed by anyone | ≈ Audit logging present; you guard the database yourself |
| Agent updates | ✓ Self-healing: checksum-verified, auto-revert on crash loops, staged rollouts, per-device rollback | ≈ Agent updates managed from your server; signing needs sponsorship |
| Operating systems | ≈ Windows and Linux; no macOS agent yet | ≈ Windows first; Linux and macOS agents with fewer features |
| Ticketing and PSA | ✗ None, and none planned: Moorfox stays an RMM | ✗ None; integrations community-built |
| Pricing | • Published: free for 10 devices, then $2 per device per month | • Free to self-host; sponsorship for signed agents; your own server costs |
Where Tactical RMM is ahead
- Your data never leaves your server, which some clients and regulators simply require.
- No per-device cost at any fleet size; the spend is your time and hardware.
- A scripting community and an API-first design that rewards automation-heavy teams.
- Everything is inspectable: when you want to know what the platform does, you can read it.
Where Moorfox is ahead
- Nothing to operate: no server to patch, back up, certificate-renew or upgrade at 2am.
- Remote desktop and quick support are first-party and end-to-end encrypted, with no MeshCentral to configure.
- A security score, streamed logs that outlive the machine, and an append-only audit trail out of the box.
- Signed, checksum-verified agents that stage their own rollouts and revert bad builds automatically.
- Attended quick support with a nine-digit code, ready the day you enrol.
How to decide
This one is genuinely about philosophy: if self-hosting is a requirement, Tactical is the right answer and Moorfox, a hosted service, is not. If self-hosting was only ever a means to a lightweight, transparent RMM, Moorfox gives you that without the operations burden.
Frequently asked questions
Can I self-host Moorfox?
No. Moorfox is a hosted service; that is what pays for the parts Tactical asks you to run yourself. If self-hosting is a hard requirement, Tactical RMM is the better fit and we would tell you so.
Is the Moorfox agent open source?
No, though its behaviour is documented, its updates are checksum-verified and signed, and everything it does on a machine lands in the append-only activity log.
Why not just run Tactical?
Plenty of teams should. The honest trade is your evenings: Tactical's cost is operating servers, certificates, upgrades and backups. Moorfox's cost is a subscription and trusting a vendor. Pick the cost you would rather pay.
See the other column for yourself.
Moorfox is free for up to 10 devices, with every feature switched on and no card required. The agents coexist happily, so you can run both side by side and compare on real machines.