[ for MSPs · and IT Companies ]

Document
the rack.

— down to the last port, cable & drives.

RackSketch gives MSPs a visual, interactive platform to document every server cabinet — equipment, connections, drives, and documentation — all linked together and accessible from anywhere.

✓ You're on the early-access list. We'll be in touch.

Cabinet Builder Connection Manager Mobile Support Inventory for Cabinets, Equipment, Cables, Drives, ext Doc Hub Backup & Snapshots

RACK-01 / ELEVATION FRONT VIEW

42U

41U

40U

39U

38U

37U

36U

35U

34U

33U

32U

31U

PP-01 — 24P Cat6A Patch Panel PP

SW-01 — 48P PoE+ Core Switch NET

PP-02 — 24P SFP+ Uplink Panel PP

                FW-01 — Firewall Appliance
                FW
              

                SRV-01 — Dell PowerEdge R760
                SRV
              

                SRV-02 — Dell PowerEdge R760
                SRV
              

SRV-03 — Dell PowerEdge R450 SRV

                NAS-01 — Synology RS1221+
                NAS
              

— — — — — — — — — — empty — — — — — —

UPS-01 — APC SMT1500RM2U UPS

◄42U►

FIG.01 · RACK-01 ELEVATION · NTS

// Features

10 Features · ONE PLATFORM

Live

Building

Roadmap

REF MODULE FUNCTION STATUS

RS·01 Cabinet Builder Visual drag-and-drop rack layout with equipment placement and U-position tracking Live

RS·02 Connection Manager Port-to-port cabling with cable labels, SFP tracking, and connection map export Live

RS·03 Document Hub Rich-text docs linked directly to equipment, sites, and tickets Live

RS·04 Inventory System Track drives, SFPs, cables, and accessories across sites with quantity management Live

RS·05 Mobile + Scanner Barcode scanning and mobile-optimized views for on-site work Live

RS·06 Migration Wizard Bulk-import equipment and connections from spreadsheets and existing documentation Live

RS·07 Vaults & Portals Encrypted credential vaults and read-only client portals with custom branding Live

RS·08 Backup & Snapshots Per-tenant warm snapshots stored locally with AES-256-GCM encrypted cold copies pushed to Wasabi S3 offsite — scheduled, automated, and restorable from the creator dashboard Live

RS·09 Network Topology Auto-generated logical network diagrams from live connection data Live

RS·10 Network Map Full network topology discovery and auto-documentation Roadmap

// Document Hub RS·03 · Live

// document hub CLIENT DOCS · SITE A

Client Documentation

▼ Server Infrastructure

● DR Procedures

○ Network Diagrams

○ Runbooks

▶ Policies & SOPs

▶ Change Log

Internal

▶ Templates

▶ Standards

Vault PIN

▶ Credentials

Disaster Recovery Procedure — Primary Site

Updated 2h ago · jsmith · 3 attachments

Organized,
not buried

Structure documentation around how your team actually works — sections, folders, and rich-text documents linked to the equipment they describe.

SEC

Sections & Folders Multi-level hierarchy with unlimited nesting per client or site

DOC

Rich Text Editor Tables, images, checklists, and formatting — no Markdown required

IMP

Folder & File Import Upload a folder or ZIP; the structure becomes doc categories automatically

VLT

Encrypted Vaults PIN-locked sections for credentials and sensitive client data

PRT

Client Portal Branded read-only login so clients see exactly what you share, nothing more

// Network Topology RS·09 · Live

// network topology

Live RACK-01 · LOGICAL

Every run, labeled and linked

Track every port-to-port connection across your rack — patch panels, switches, servers, and storage — with cable labels, SFP transceivers, and interface types documented automatically.

CONN-014 · FW-01:ETH0 → SW-01:P01 · CAT6A
CONN-015 · SW-01:P24 → SRV-01:ETH0 · CAT6A
CONN-016 · SW-01:P25 → NAS-01:ETH0 · DAC 10G
CONN-017 · SW-01:SFP1 → SW-02:SFP1 · Fiber SM
CONN-018 · UPS-01:OUT1 → SRV-01:PWR · C13

// Global Inventory RS·04 · Live

Stop entering specs from scratch. RackSketch ships with a searchable catalog of hundreds of real equipment models — Dell, Cisco, Fortinet, APC, Synology, and more — each pre-loaded with full specs. Search by model name, pick the result, and it's ready to place and wire up in your rack.

Pre-loaded catalog

Find it.

Hundreds of real equipment models across 35+ categories — servers, switches, firewalls, UPS, KVM, storage, and more — ready to search on day one.

The workflow

Add it.

Search by make and model, review the pre-loaded specs, and add to your company library. It appears in your rack editor sidebar immediately.

In the rack

Place it.

Drag from the sidebar onto the rack. Ports are pre-configured — ethernet, SFP+, fiber, console, power — ready to connect the moment it lands.

CAT

Searchable equipment catalog

Type a model name and search the global database. Results include confidence scores, U size, power draw, and full port layouts. No spec sheet hunting required.

SPC

Full specs, pre-loaded

Every catalog entry carries the complete port manifest — ethernet, SFP+, fiber, console, management, power — so equipment is ready to wire the moment you place it.

LIB

Your company library

Add equipment once and it lives in your team's sidebar. Every technician building a rack sees the same library — no duplicate setup across users or sites.

IMP

Manual & import options

If the catalog doesn't have it, build it manually with the full spec form, or upload an Excel import template. Custom equipment works identically to catalog equipment.

// Security RS·05 · Live

// tenant isolation model MULTI-TENANT · HARD WALL

Clients can't see each other.

RackSketch's tenant isolation isn't a role check — it's a hard data constraint built into every query. We test cross-tenant data leakage with five dedicated penetration integration tests that run on every build. And because encryption keys never live in the database, even privileged database access produces unreadable ciphertext.

ISO

Hard row-level tenant isolation Every database query carries a tenantId filter enforced at the ORM layer — not optional middleware. Cross-tenant data isn't blocked, it's never returned. Five dedicated cross-tenant penetration tests run on every build.

KSP

Encryption keys never touch the database Vault encryption uses a key that lives in the deployment environment, not the database. Even with full read access to every database row, vault contents are indecipherable ciphertext — the key needed to decrypt them is never stored alongside the data.

ENC

Authenticated vault encryption Credentials use AES-256-GCM with a unique random 16-byte IV per stored item and a GCM authentication tag. The same password stored twice produces different ciphertext. Tampering is detected cryptographically, not by the application.

FSE

File encryption at the storage layer Every uploaded file is encrypted by MinIO SSE-KMS using AES-256 with a platform-managed key. Files are encrypted at rest at the storage layer — not just in transit, not just in the database.

MFA

Portal MFA — enforced, not optional Client portal logins require TOTP enrollment before any content is accessible — enforced at the middleware layer. There's no admin setting to waive it. A portal user with no TOTP device sees nothing.

SES

Database-backed, instantly revocable sessions Session tokens live in the database — not JWTs that can't be revoked. Disable a user in the admin panel and their next request is rejected immediately, not at token expiry hours or days later.

// Backup & Snapshots RS·08 · Live

// backup architecture

Live TWO-TIER · ENCRYPTED

Two tiers.
Zero single points
of failure.

Every tenant gets automatic snapshots — fast local copies for instant restore, and encrypted offsite copies on Wasabi S3 for disaster recovery. Both stay current after every run.

WAR

Warm Snapshots Per-tenant JSON snapshots stored in a local MinIO container. Each snapshot captures cabinets, equipment, port connections, cable labels, and inventory. Restorable in seconds from the creator dashboard.

COL

Cold Storage — Wasabi S3 After every snapshot, an encrypted copy is pushed to Wasabi S3 offsite. The warm copy stays on your server; the cold copy lives in the cloud. Both are always current.

ENC

AES-256-GCM Encryption Every cold snapshot is encrypted with AES-256-GCM before it leaves your server. The encryption key never leaves your environment — Wasabi stores ciphertext only. Even with bucket access, the data is unreadable.

SCH

Scheduled & Automated Set daily, weekly, or monthly schedules from the creator dashboard. Snapshots run automatically, prune old copies to your configured retention limit, and report per-tenant cabinet and document counts.

RST

Additive Restore Restores are additive — existing data is never overwritten. Choose any snapshot from the history and restore it to the target tenant. Missing records come back; present records stay untouched.

// vs Others

The old way

[ × ]Flat documents with no visual context
[ × ]No rack diagram — screenshots from Visio or nothing
[ × ]Rigid page structure, hard to customize
[ × ]No port-to-port connection tracking
[ × ]Corporation acquisition & pricing unpredictability
[ × ]No native inventory or drive/SFP tracking
[ × ]No easy way out of Contracts & Forced use
[ × ]No offsite backup — if the server dies, data is gone

With RackSketch

[ + ]Docs linked directly to equipment instances
[ + ]Visual cabinet builder — drag, place, document
[ + ]Custom doc sections, PIN vaults, and templates
[ + ]Port-to-port connections with cable labels & SFP tracking
[ + ]Self-hosted — your data, your server, your pricing
[ + ]Full inventory system with client portal logins
[ + ]One year Contract and Month to Month
[ + ]Warm + cold snapshots with encrypted Wasabi offsite backup

Documentthe rack.

Organized,not buried

Every run, labeled and linked

Clients can't see each other.

Two tiers.Zero single pointsof failure.

Join the early access

Document
the rack.

Organized,
not buried

Two tiers.
Zero single points
of failure.