Promisec PEM (Promisec Endpoint Management) software can be installed completely on-premises. It gives visibility, advice, and even remediation help for all kinds of threats, unwanted programs and compliance issues. PEM is deployed on a server that acts as the management hub for the system. You only need one, regardless of how large your network is, since it is only used to set up scans, white and blacklisting, and other management tasks. Administrators can very easily whitelist and blacklist programs that they need, or definitely dont want, running on their network.”]
Source: https://www.csoonline.com/article/3215124/how-promisec-keeps-endpoints-in-compliance.html