Philippines – Hexnode has launched Hexnode Synapse, an agentic orchestration layer that coordinates IT and security operations across enterprise systems. The company, which operates as the enterprise software division of Mitsogo, unveiled it in Taguig City, Philippines, on 10 September 2026.
According to Hexnode, Synapse turns requests and system events into coordinated, governed, and traceable actions. The platform is built to address a persistent problem in enterprise IT: work that spans multiple disconnected systems, each requiring manual handoffs between teams and tools.
Recent research cited by the company found that around one in five employees across ASEAN lose more than seven hours a week moving information between systems and reconciling data. Hexnode says these handoffs add manual work, slow response times and make it harder to trace how an issue was ultimately resolved.
“If you look at the real work of IT, nothing ever happens inside just one system. Onboarding a person touches identity, devices, and your HR system. Responding to a threat touches the endpoint, the user’s access, and the ticket. And today, a person is the one connecting all of that, every single time,” said Apu Pavithran, CEO and Founder of Hexnode.
Hexnode Synapse is designed to connect those steps directly. It runs deepest on three of Hexnode’s own products — Hexnode UEM, Hexnode XDR and Hexnode IdP — while also extending workflows into surrounding enterprise systems that organisations already use.
Rather than requiring administrators to move manually between consoles, the platform coordinates agents, approvals and system actions around a single request, alert or event.
“The shift is agentic: where the platform is not just telling you what to do, it’s actually doing the work,” Pavithran said.
At the core of Synapse are specialist AI agents that reason about incoming requests and alerts, determine the appropriate next step and act within defined guardrails. The Device Agent handles root-cause diagnostics, compliance-drift remediation, patch and vulnerability remediation, and device provisioning through Hexnode UEM.
Meanwhile, the Identity Agent manages access requests, identity lifecycle operations, role changes and account-related tasks through Hexnode IdP. The Threat Agent, for its part, supports alert triage, threat investigation and containment through Hexnode XDR.
Beyond these built-in agents, organisations can also configure custom agents tailored to their own tools and knowledge base sources. In addition, Synapse can coordinate cross-product sequences whenever a workflow spans more than one system.
For instance, a single prompt such as “Onboard John” prompts the platform to read the new hire’s HR profile and initiate the onboarding workflow. Synapse then creates the identity and assigns app licences based on the employee’s department, pushes zero-touch device configuration and endpoint protection policies in parallel, and records the corresponding IT ticket — all as one governed workflow.
Should a step stall, the system recovers on its own. If app licences run out, for example, Synapse raises a ticket and resumes provisioning the moment a seat becomes free.
Governance sits at the centre of the platform’s design. Hexnode Synapse relies on guardrails — admin-defined limits on what an agent can ever do independently — together with action-level approval gates and a traceable execution history to keep agent actions under human control.
Work that falls within those guardrails proceeds autonomously, whereas sensitive actions, such as a device wipe, endpoint isolation or privileged access change, are routed to a named approver before execution.
“Routine work can happen on its own. Anything consequential comes back to a person, and if the system is not sure, that comes back to a person too. Autonomy without that control is not something an IT team will ever deploy,” Pavithran explained.
Every autonomous or approved action is logged in what Hexnode calls the Execution Centre, capturing what triggered the request, what the agent decided, who approved it and what ultimately ran. IT and security teams can browse and export this history, effectively turning an audit into a download rather than a multi-week evidence hunt.
