The STX AI Agent
Diagnosis and resolution, in seconds, with a human always in the loop
The agent runs on every managed endpoint, watching for the issues that generate most support volume — patching failures, printer errors, network drops, application crashes — and resolving them the moment they're detected. Anything outside its reviewed, fixed list of actions is escalated to the 24/7 human team behind it.
you
The whole office just lost internet.
agent
I checked this PC — the network adapter is stuck. I’ll reset it. This one’s low-risk, so I’m doing it now.
agent
If it’s the whole office, the router may need a deeper reset — that one needs your OK. Want me to queue it?
Describe it
Your team types the problem in plain English — "my printer won't print," "Outlook keeps crashing." No ticket numbers, no jargon.
It sees & diagnoses
The agent looks at the screen, reads the actual error, and pinpoints the cause — the way a good technician would, only instantly.
It fixes
The common stuff — the 60% of problems that are the same handful of issues — is resolved on the spot, in seconds.
You approve the big stuff
Anything with real risk (a reboot, a network reset, an account change) waits for your one-click OK first. Nothing surprising ever happens.
Beyond scripted fixes
Root-cause troubleshooting that improves with every case
A single canned response isn't diagnosis. When the first fix doesn't resolve an issue, the agent gathers evidence, evaluates the likely root cause, and proposes the next step — then records the outcome, so the resolution is instant the next time the same issue occurs.
Investigates
Runs read-only checks — event logs, disk health, running processes, network, antivirus — to see what's really going on.
Finds the cause
Reasons over the evidence to pinpoint the likely root cause, instead of guessing at the symptom.
Tries the next step
Recommends the best next fix — and anything risky still waits for your one-click approval.
Learns what works
When a client confirms a fix resolved the issue, it's remembered — so the next person with the same problem gets the answer instantly.
Every diagnostic it runs is read-only and logged, and it never applies a risky fix on its own — you stay in control while it does the legwork. The more it's used, the sharper it gets at your environment.
Coverage
Search the capability catalog
Every listed issue is a reviewed, named fix — not a general-purpose command. Search or filter by category to see exactly what the agent resolves before it ever runs on a managed device.
71 of 71 shown
“Outlook won't open or keeps crashing”
→Rebuilds your Outlook profile — nothing is deleted, a fresh one is created.
“Office needs repair or won't activate”
→Runs an Office Quick Repair to fix the installation.
“My browser is slow or acting broken”
→Clears the browser's corrupted cache.
“Teams won't load or shows old info”
→Clears the Teams cache so it starts fresh.
“OneDrive is stuck syncing”
→Resets the sync client — your files stay safe in the cloud.
“My taskbar or desktop froze”
→Restarts Windows Explorer — no full reboot needed.
“A program is frozen and won't close”
→Stops the stuck program by name (with your OK).
“I need a new app installed”
→Installs a package from our vetted software catalog.
“I need a printer set up”
→Installs and configures a network printer for you.
“It keeps printing to the wrong printer”
→Sets the right default printer.
“One print job is stuck in the queue”
→Clears the stuck job for that specific printer.
“Printing is completely jammed”
→Stops the spooler, clears all spool files, and restarts it.
“What printers are on this PC?”
→Lists every installed printer.
“The whole office lost internet”
→Resets the network adapter and renews the address.
“My PC got a bad network address”
→Releases and renews the DHCP lease.
“One website won't load but others do”
→Flushes the DNS cache.
“Wi-Fi won't reconnect to our network”
→Forgets the saved Wi-Fi profile so it can be re-added fresh.
“What Wi-Fi networks are saved here?”
→Lists the saved Wi-Fi profiles.
“Internet works in the browser but not in an app”
→Clears a bad system proxy setting.
“Is a proxy configured on this machine?”
→Reports the current system proxy configuration.
“My mapped network drive disappeared”
→Reconnects the mapped drive with your existing credentials.
“This PC isn't showing up on the network”
→Re-registers the PC's DNS records.
“Odd local network glitches”
→Clears the ARP cache to fix LAN-local hiccups.
“What network adapters does this PC have?”
→Lists every adapter and its status.
“Deep network weirdness after an update”
→Resets the full network stack (Winsock / TCP-IP).
“Is my PC up to date?”
→Checks for pending Windows updates instantly.
“Install the latest Windows updates”
→Installs pending updates — with your OK, since it may reboot.
“Did my updates actually install?”
→Reports the recent Windows Update history.
“Are my apps out of date?”
→Lists every app with an available update.
“Update one specific app”
→Upgrades a single vetted app to the latest version.
“Update all my apps”
→Updates every managed app to the latest version (with your OK).
“Windows Update is completely stuck”
→Full reset of the Windows Update system (with your OK).
“My PC is running out of space”
→Reports what's using the disk and clears safe junk and temp files.
“Free up disk space now”
→Empties the Recycle Bin and clears Windows update caches.
“How much space is left?”
→Reports free and used space on every drive.
“Is my hard drive failing?”
→Checks physical disk health (SMART) before it dies.
“My drive has errors but I can't reboot now”
→Runs an online volume repair — no reboot for most fixes.
“My drive needs a deep check”
→Schedules a full chkdsk pass for the next reboot.
“My PC is slow to start up”
→Lists everything launching at boot so we can trim it.
“My laptop battery drains fast”
→Runs a full battery health report.
“My power settings are messed up”
→Restores Windows power plans to their defaults.
“Windows feels corrupted or crashes”
→Repairs core Windows system files (SFC).
“Deep Windows corruption after SFC”
→Repairs the Windows component store with DISM.
“Search isn't finding my files”
→Rebuilds the Windows search index.
“Am I actually protected right now?”
→Checks antivirus and real-time protection status.
“Run a quick virus scan”
→Triggers a Microsoft Defender quick scan.
“Run a full virus scan”
→Triggers a full Microsoft Defender scan of every file.
“Update my virus definitions”
→Forces the latest antivirus definitions right now.
“Is my drive encrypted?”
→Reports BitLocker encryption status per volume.
“Are any security certificates about to expire?”
→Lists certs expiring within 30 days.
“Is this port or app allowed through the firewall?”
→Lists the matching firewall rules.
“Our firewall rules are a mess”
→Resets Windows Firewall to defaults (with your OK).
“Who has admin rights on this PC?”
→Lists the local administrator accounts.
“Show me our whole security posture”
→Runs a full compliance snapshot — encryption, antivirus, firewall, patches, access.
“My account is locked out”
→Unlocks the Active Directory account (with approval — it's identity-sensitive).
“Is this account active or locked?”
→Reports whether an AD account is enabled or locked out.
“This PC lost its connection to the domain”
→Repairs the domain trust relationship (with approval).
“What groups is this user in?”
→Lists the user's group memberships for an access review.
“Which PCs are inactive and should be cleaned up?”
→Lists AD computers inactive for 90+ days.
“Group Policy isn't applying”
→Forces an immediate Group Policy refresh.
“Which policies actually apply to this PC?”
→Reports the Group Policy objects in effect.
“Something's wrong but I can't describe it”
→Collects system diagnostics (OS, disk, memory, network) for triage.
“Let me show you what I'm seeing”
→Captures a screenshot for our team — held in memory, never saved to disk.
“My PC keeps throwing errors”
→Collects the most recent error entries from the event logs.
“Something is eating all my CPU”
→Lists the top CPU-using programs so we can pinpoint it.
“Is a particular service running?”
→Reports the status of any named Windows service.
“Restart a stuck Windows service”
→Restarts an allowlisted Windows service by name.
“Are my drivers current and signed?”
→Lists installed drivers with version and signing status.
“What's installed on this PC?”
→Lists every installed application.
“What are this PC's specs and serial number?”
→Reports model, BIOS, and serial for warranty and asset records.
“Is Windows activated on this machine?”
→Reports the Windows license activation status.
And it keeps learning: when something new comes up, our team reviews and adds the fix — so the agent gets better at handling your environment over time.
Safe by design
The guardrails, in full
Placing an AI agent on a managed device is a legitimate concern — the guardrails below were built before any feature was, and they're the reason the agent can be deployed safely at scale.
It can only do named, reviewed fixes
The agent can't run arbitrary commands on your machines — ever. It picks from a fixed list of fixes we've each written and reviewed. There is no path for it to "go rogue."
Risky actions wait for your approval
Read-only checks and safe fixes run instantly. Anything that changes your system — a reboot, an account unlock — queues for a human's one-click sign-off first.
Every action is logged
Every check, every fix, who asked for it, and what happened — all recorded. You get a complete, reviewable history, not a black box.
You only ever touch your own devices
Each PC is bound to your account with an unguessable key. Nobody — not another client, not a stranger with the link — can reach a machine that isn't yours.
Client portal
One login. Every device. Full approval control.
The portal shows every managed device, its current health, and any action awaiting approval. Run a fix directly, approve a queued update, or request support — from any device, anywhere.
Full fleet visibility
Every device, online or offline, with current status and last check-in — nothing operates outside view.
One-click approval
Higher-risk fixes queue in a single approval list. Approve, and the agent executes immediately.
Fully managed option
Delegate device management to STX entirely, with the ability to reclaim direct control at any time.
FAQ
Frequently asked questions
Is it actually safe to let AI onto my computers?
Yes. The agent operates from a fixed, human-reviewed list of specific fixes and cannot execute arbitrary commands. Anything carrying real risk waits for your one-click approval, and every action is logged. The guardrails were built before the features.
What if it breaks something?
The everyday fixes it runs on its own are safe and reversible by design — it clears a cache, resets an adapter, rebuilds a profile. Anything that could actually disrupt you needs your approval before it runs, and our 24/7 human team is behind all of it.
Do my staff need to be technical?
Not at all. They describe the problem the way they'd tell a coworker — "my email won't open." No ticket numbers, no jargon, no training. That's the whole point.
What happens with problems it can't fix?
It never guesses. If something's outside its known fixes, it hands off to a real STX technician and opens a ticket — so nothing falls through the cracks, and a human takes it from there.
Can I still just call a person?
Always. We answer the phone directly, with no offshore call queue. The agent handles routine issues so our team has more time for the ones that require a human.
Who can see or control my PCs?
Only you. Each machine is tied to your account with an unguessable key, so no one else — not another client, not someone who stumbles onto the link — can reach it. If you'd rather we manage everything, you hand that to us explicitly, and you can take it back any time.
Start here
See the agent working on your environment
Start with a free Security & Systems Assessment. We’ll show you exactly what the agent would handle on your machines — and what’s at risk today.