Datasheet

SWOT PAM datasheet

SWOT PAM pageAsk for the designed PDF

Privileged access management

SWOT PAM 1.0

Rudratic Technologies

Every keystroke, click and query inspected inside the live session

SWOT PAM brokers every privileged SSH, RDP and database session through a proxy, so the user never receives the target credential. The PAMGuard engine reads the protocol stream as it passes, scores what it finds against Linux GTFOBins, Windows LOLBins, SQL and GUI triggers, freezes the session at score 70 and ends it at 150. Nothing is installed on the target host.

The problem

Many privileged access tools establish what happened after the session, through recording playback and log correlation. Mouse-driven actions inside a Windows desktop produce no command text, so a file deleted through a right-click menu never reaches a keystroke or command log.

  • 0Agents installed on target systems
  • 3Enforcement tiers: monitor, freeze, terminate
  • 12Modules in the platform console

Core capabilities

Live enforcement, not alerting

  • Proxy inspects raw protocol bytes for SSH, RDP and SQL
  • Score 40 monitors, 70 freezes input, 150 terminates
  • A frozen session waits for an admin to approve or terminate

GUI action detection on RDP

  • Right-click then Delete within 5 s and 500 px scores 80
  • Window titles flag regedit, Credential Manager and Wireshark

Central vault and rotation

  • AES-256-GCM storage, folders, check-in and check-out
  • Scheduled rotation, rotate after use, dual approval

Zero standing privilege

  • Just-in-time grants with ticket, justification and auto-expiry
  • Break-glass override logged and alerted at high priority

Session intelligence and replay

  • Risk verdict, event timeline and searchable commands
  • Frame-by-frame replay with a SHA-256 integrity hash

SWOT PAM 1.0 datasheetPage 1 of 2

Enterprise capabilities

Identity and single sign-on

  • OIDC and SAML for Entra ID, Google, Okta and OneLogin
  • TOTP MFA, LDAP and AD sync, role mapping on provisioning

Governed database access

  • PostgreSQL and Oracle Net proxies with full query audit
  • Per-session temporary accounts, revoked on disconnect

Compliance reporting

  • Control-level mapping for ISO 27001, SOX, PCI DSS and HIPAA
  • Each control cites the PAM evidence behind it

Immutable audit and SIEM

  • Insert-only audit tables enforced by database triggers
  • Event delivery over HMAC-SHA256 signed webhooks

Platform modules

Dashboard
Active sessions, risk posture and pending approvals in one view.
Central Vault
Credential explorer, reconciliation, rotation, approvals and vault audit.
AI Access
Requests access in plain language, checked against policy before it is raised.
Sessions
Live sessions, the frozen-session queue and forensic replay.
Command Search
Searches every command and query across all recorded sessions.
Assets
Target inventory with discovery scans and one-click onboarding.
PAMGuard Agents
Trigger registry, scoring weights and enforcement thresholds.
Users and Roles
Role definitions and the menu each role may see.
Policies
Access rules, custom guard rules and input monitoring settings.
Access Hub
Requests, approvals, just-in-time windows and break-glass grants.
Compliance Hub
Framework scoring, control status and access certification campaigns.
Behaviour
User baselines and the anomalies raised against them.

Technical specifications

ArchitectureProxy-only gateway; Node.js control plane, Go SSH proxy
Target agentsNone: all inspection happens at the proxy
ProtocolsSSH, RDP over HTML5, PostgreSQL, Oracle Net
EncryptionAES-256-GCM at rest; JWT HS256 with a revocation list
RecordingS3-compatible or local storage, SHA-256 hash per recording
DeploymentCloud, on-premises and hybrid; Docker Compose
IntegrationsSIEM webhooks, Jira, ServiceDesk, Microsoft Teams, LDAP
EditionsBasic, Moderate and Pro, enforced by a signed licence

Framework mapping

  • ISO 27001
  • SOX
  • PCI DSS
  • HIPAA

Evidence mapped to access control and logging requirements. Whether a control is met depends on your configuration, scope and assessor.

Rudratic Technologies Ltd · London and Chennai · info@rudratic.com · rudratic.com/products/swot-pam

SWOT PAM 1.0 datasheetPage 2 of 2

Book a demoAll datasheets