FindIT Basecamp

SaaS Command Center for Endpoint Recovery

FindIT Basecamp is the command center for your endpoint search and rescue operations. This tenant-scoped cloud portal authenticates IT operators, Scout agents, and FindIT Tabs, tracks device heartbeats, manages endpoint records, and initiates FindIT Mode from anywhere.

What Basecamp Does

Provides tenant-based sign-in access for IT operators.
Manages Scout and mobile enrollment through rotatable enrollment tokens and generated tenant API keys.
Shows latest Scout and Tab heartbeat status, including online state, battery level, pairing presence, and last-seen time stamp.
Queues FindIT Mode start/stop commands and tracks command acknowledgements.
Maintains per-tenant event history and searchable host context (including hostname aliases).

Built for Operational Teams

Tenant isolation is enforced across users, devices, API keys, and command queues.
Operator tools support tenant provisioning, tenant admin bootstrap, and API key lifecycle tasks.
Tenant settings include session timeout, theme/accessibility preferences, and Scout alert-message control.
Designed to complement your existing endpoint-management stack with physical recovery capability.

Zero Trust and Security by Design

Basecamp follows a zero-trust communication model: no Scout agent, Tab, or service path is trusted by default. Scout and Tabs must continuously present tenant context plus valid credentials before Basecamp accepts check-ins, enrollment, or command traffic. Access is scoped to the minimum tenant boundary needed for each action, and enrollment/API credentials can be rotated or revoked to immediately cut off trust.

Tenant scoping and isolation are enforced in runtime logic across users, devices, hosts, API keys, and command queues.
Passwords and machine credentials are protected with strong Argon2 hashing (stored as hashes, never reversible plaintext).
Enrollment token lifecycle controls are implemented, including active/revoked state, last-used tracking, and admin rotation.
CSRF protection and hardened session defaults are in place for portal form/session flows.
Auth safety controls include anti-enumeration responses and validated redirect handling.
Per-tenant event records provide auditable operational history for recovery actions.

This architecture direction aligns with Executive Order 14028 priorities around zero trust, strong identity, encryption in transit/at rest, and auditable event handling for incident response operations.

Today, Basecamp can be positioned as having strong zero-trust alignment direction and a solid technical control foundation in access control, identity handling, and event visibility. In production, Basecamp is designed to accept only HTTPS traffic with TLS 1.2 or newer.