What we capture
Services, scheduled tasks, installed programs, local accounts, startup items, and key security settings — in a structured, dated record.
IT & SMB
Windows endpoint integrity snapshots: a clean baseline of what ‘normal’ looks like.
Most small teams have no reliable record of their systems' baseline state. AuditTrace captures a user-authorized snapshot of Windows system state — services, scheduled tasks, installed software, local accounts, and security posture — so you can compare, review, and prove change later.
The need
You can't spot a change without a baseline.
When something looks wrong on a machine — or after a maintenance window, an incident, or a staff change — you need to know what it looked like before. Without a baseline, every review starts from zero.
What you can do with it
Compare before/after a change, establish a clean baseline for an insurance or compliance question, or hand a clear picture to IT or an investigator.
Pricing
Single machine to small fleet.
Single Endpoint Snapshot
$1,500
- Local collector run with your authorization
- System-state summary
- Manifest + integrity record
- Executive memo
Small Fleet Snapshot
$3,500
- Multiple endpoints
- Consolidated inventory
- Before/after deltas
- Evidence register
Recurring Snapshot Retainer
$250
- Monthly or quarterly snapshots
- Change report each cycle
- Maintained baseline
- Priority scheduling
Request a snapshot
User-authorized, always.
We only ever capture systems you own or are authorized to examine. Tell us how many machines and what prompted it.
Prefer to start offline? Download the fillable Endpoint Snapshot intake form, complete it, and email it back to contact@audittracelabs.com.
Download the Endpoint Snapshot intake form (PDF)
Download the Endpoint Snapshot intake form (PDF)