Identity and access
Confirms the destination and blocks access when the identity does not match the expected one.
- Validated and pinned Host Key
- Key changes detected
- TOTP
Security from the first access
Security before any credential.
The SSH Host Key is verified before credentials are sent. Sensitive data is encrypted, and relevant actions are recorded.
- SSH Host Key
- TOTP
- Managed encryption
- Connection initiated
- SSH identity verified
- Credentials sent
- Execution recorded
Protection in practice
Security applied at every stage.
From connection to storage, each layer reduces exposure and keeps actions verifiable.
Data protection
Keeps credentials and sensitive fields protected with encryption and securely managed keys.
- Credentials and secrets protected
- Sensitive fields protected
- Securely managed keys
Auditability and traceability
Records important actions and relevant events to make operations more transparent.
- Searchable auditing
- Recorded operational actions
- Relevant events for analysis
Operational principle
Protection at three moments.
- 01
Before collection
Authenticated access, protected sensitive fields, and a confirmed SSH identity before credentials are sent.
- 02
During collection
Environment-scoped execution, sanitized output, and semantic validation before the version is accepted.
- 03
After collection
History, download, comparison, and auditing keep the version available for inspection.