Isn't ManageEngine the one that got cyberslammed a few years ago?

ManageEngine products are good value for what you pay however they frequently have some quite high-risk bugs. 

DO NOT publish it on the internet & keep on top of patching (they often will release several a month).

I wasn't fond of the agent being made into a single agent across multiple products, with remote access technically possible through the agent even though we didn't want or need this (thinking of the Kaseya supply chain attack mainly) we only needed it for inventory of apps.

Self hosted version was higher maintenance than I was used to at the time.  Fortunately we've gone with another product that is hosted so I don't have to worry about patching that!