A self-hosted, AI-native operating system for a managed service provider. Over 25 independently deployable microservices and background daemons, a local LLM intelligence layer, a multi-tenant XDR security engine, dual remote access, and a unified single-pane UI — designed, written, and operated end to end.
Walk through the platform's key screens — from the unified dashboard to AI ticket intelligence, the 3D facility viewer, and the security command center.
The PHP core serves the unified experience and orchestrates everything over internal HTTP. Authentication is centralized in an identity service (JWT RS256 + OIDC + MFA), each domain owns its own data, and cross-module lookups are resolved by HTTP hydration — never by reaching into another service's tables.
core, rmm, security, all Compose profiles.// Ticket created → AI pipeline POST /api/v2/tickets │ ├─▶ glass-tickets // persist + state machine │ │ │ ├─▶ ai-worker // Dual-LLM screen │ │ sandbox → privileged │ │ ↳ intent, urgency, entities │ │ │ └─▶ pgvector // top-3 similar (RAG) │ └─▶ redis pub/sub // glass.tickets.created ↳ sla-monitor · webhooks · chat
Each is independently deployable, versioned, and owns its schema. Hover any card.
Core monolith — 11 dashboards, ticket UI, admin, AI report builder, 3D facility viewer.
Auth & identity — JWT RS256, SSO/OIDC, MFA, 7-tier RBAC, settings manager.
PSA/ITSM — lifecycle state machine, rules engine, time tracking, paired with Go SLA daemon.
CMDB — asset lifecycle, dynamic 0–100 health scoring, warranties, RMA claims.
XDR & security ops — Wazuh SIEM on DMZ, multi-tenant isolation, blocklists, posture tracking & sandboxed remediation.
Automated penetration testing — continuous attack simulation, vulnerability scanning, and automated CVE audits.
RMM & remote access — MeshCentral + RustDesk OSS dual remote access, auto-checkin tokens, interactive terminal, patch management.
Native billing engine — SolidInvoice-powered PostgreSQL billing, recurring subscriptions, quotes, and payment gateway integration.
Telephony & audio — UniFi Talk, Android Call & Meeting Audio Pipeline with local Whisper ASR & Pyannote speaker diarization.
Real-time messaging — WebSocket, WebRTC voice/video, call transcription (Go binary handling 10k+ concurrent connections).
Cybersecurity training & testing — interactive awareness modules & quizzes, phishing-simulation testing, per-user risk scoring.
Procurement — purchase-order lifecycle, supplier catalog, computed totals tied to the CMDB.
CRM — campaigns, .docx merge, queue dispatch with SKIP LOCKED, Redis Streams (compiled Go daemon).
AI worker — Dual-LLM sandbox, pgvector RAG, Pydantic-enforced LLM outputs on local DGX Spark.
Email — Exchange ingestion, AI triage & noise scoring, push notifications.
PSA sync & native replacement — retired in production at Sterling Innovations (dropping catalog search from 3,429 ms to 30.5 ms).
A few pieces of Glass that go beyond what off-the-shelf platforms attempt.
Untrusted text is screened by a sandbox model for prompt injection before the privileged automation model (glass-dev:latest) or reasoning engine (deepseek-r1:70b) ever processes it — powered by hardware-aware dynamic model routing on Blackwell unified memory.
A plain-English prompt becomes a validated SQL query against 80+ tables, executed safely and rendered as a report — no query language required from the user.
RustDesk OSS + MeshCentral integrated dual remote access with auto-checkin tokens and a native multi-shell interactive terminal (CMD/PowerShell/Bash) with full scrollback.
Eliminated commercial SaaS lag by migrating to PostgreSQL with pgvector, dropping asset and catalog query times from 3,429 ms down to 30.5 ms.
Audio pipeline ingests mobile and UniFi Talk recordings, performing local Whisper ASR and Pyannote speaker diarization to attribute dialogue directly inside tickets.
Wazuh SIEM/XDR on DMZ, automated Strix pentesting & vulnerability mapping, SSO/OIDC + MFA, CRU CA mTLS, and sandboxed bubblewrap script execution.