Self-hosted · ITIL-aligned · Enterprise ready
IT Service Management &
Automation in One Platform
Tenon brings a complete ITIL service desk and an infrastructure automation engine together in one platform — running on your own servers, or fully hosted by us. Log and resolve tickets, then actually action the work: Active Directory, Entra and VMware, every change tied to a ticket for audit.
PRECISION · INTEGRITY · RESILIENCE
What you get
A service desk that actually does the work
Not just a place to log tickets — a real automation engine wired into Active Directory, Entra and VMware.
ITIL service desk
Incidents, problems, change & release
A full ITIL-aligned service desk with SLAs, a service catalogue and CMDB — every request tracked end to end and tied to the assets and changes behind it.
- SLA timers, priorities and escalation
- Change & release with approval gates
- Self-service catalogue + client portal
Automation engine
Provision infrastructure from a ticket
Approve a request and Tenon does the work: create AD/Entra accounts, reset passwords, build VMware VMs — each action logged against a ticket ID for full audit.
- Active Directory & Entra lifecycle
- VMware ESXi / vSphere provisioning
- Every action audited to a ticket
Run the business
Finance, CRM, projects & more
Beyond IT: invoicing and tool-spend tracking, a CRM pipeline, projects and a developer API — 30+ modules, all in one self-hosted platform.
- Financial dashboard & invoicing
- CRM pipeline & project boards
- REST API, SIEM forwarding, reporting
Modules
30+ modules, one platform
A complete ITSM suite plus the automation and operations tooling around it.
Pricing
Pricing, your way
Self-hosted on your infrastructure, or fully hosted by us.
Run Tenon on your own infrastructure. Per-user pricing, no per-seat cloud markup, your data never leaves your network.
Essentials
The core ITIL service desk plus AD automation and RBAC — everything a small IT team needs.
- Helpdesk & ticketing with SLAs
- Active Directory automation
- Asset & licence tracking
- Role-based access control
- Client portal
- Email & inbound ticketing
Professional
Adds change & release, VMware provisioning, projects and the full ITIL toolset.
- Everything in Essentials
- Change & release management
- VM provisioning (ESXi / vSphere)
- Problem & service catalogue
- Projects, CRM & finance modules
- Developer API & webhooks
Enterprise
For larger estates: SSO, SIEM forwarding, advanced RBAC, monitoring and priority support.
- Everything in Professional
- Entra ID / SAML SSO enforcement
- SIEM forwarding & audit
- High-availability deployment
- Per-section RBAC groups
- Priority support & onboarding
Per user / month, billed annually. Unlimited self-hosting.
We run and maintain Tenon for you — updates, backups and high availability included. Ideal for larger companies that want the platform without the ops.
Hosted Professional
The Professional feature set, fully managed and hosted by Tenon.
- All Professional modules
- Managed updates & backups
- 99.9% availability target
- Daily off-site encrypted backups
- Dedicated subdomain + TLS
- Email & chat support
Hosted Enterprise
Enterprise features, managed hosting and a tailored SLA for larger organisations.
- All Enterprise modules
- Custom SLA & uptime guarantee
- SSO, SIEM & compliance support
- Dedicated environment
- Onboarding & migration service
- Named account manager
Managed hosting on Tenon infrastructure. Annual contract.
FAQ
Frequently asked questions
Can I run Tenon on my own servers?
Yes. Self-hosting is the primary deployment — Tenon runs on your own Ubuntu/Docker infrastructure with a MySQL/MariaDB database, so your data never leaves your network. A fully hosted option is also available.
Does Tenon automate Active Directory and VMware?
Yes. Tenon includes built-in Active Directory / Entra automation (create, disable, reset accounts) and VMware ESXi/vSphere VM provisioning, with every automated action tied to a ticket ID for auditing.
How is Tenon licensed?
Per user, from £18/user/month self-hosted. A managed hosted option is available for larger companies. See the pricing page for self-hosted and hosted tiers.
Is Tenon ITIL-aligned?
Yes. Tenon implements the core ITIL practices — incident, problem, change and release management, a service catalogue and request fulfilment, a CMDB and SLA management — so you can run a recognised service-management process out of the box.
Can standard users and IT admins be kept separate?
Yes. Role-based access control with per-section groups separates standard users from IT administrators, and automation endpoints (AD, Entra, VMware) are protected so only authorised admins can trigger infrastructure changes.
Does Tenon integrate with our identity provider?
Yes. Tenon supports Microsoft Entra ID / SAML single sign-on and on-prem Active Directory via LDAPS, and can enforce SSO-only login on the Enterprise tier.
Can we migrate from self-hosted to hosted later (or back)?
Yes. It is the same platform and data model either way, so you can move between a self-hosted deployment and Tenon-managed hosting without re-implementing.
Is there an API?
Yes. Tenon exposes a JSON REST API with scoped API keys plus webhooks, so you can read and create records and wire Tenon into your existing tooling.
See Tenon on your terms — self-hosted or hosted
Book a 30-minute walkthrough tailored to your deployment preference.