Home Resources Datasheets SWOT PAM datasheet Every keystroke, click and query inspected inside the live session SWOT PAM brokers every privileged SSH, RDP and database session through a proxy, so the user never receives the target credential. The PAMGuard engine reads the protocol stream as it passes, scores what it finds against Linux GTFOBins, Windows LOLBins, SQL and GUI triggers, freezes the session at score 70 and ends it at 150. Nothing is installed on the target host.
The problem Many privileged access tools establish what happened after the session, through recording playback and log correlation. Mouse-driven actions inside a Windows desktop produce no command text, so a file deleted through a right-click menu never reaches a keystroke or command log.
0 Agents installed on target systems 3 Enforcement tiers: monitor, freeze, terminate 12 Modules in the platform console Core capabilities Live enforcement, not alerting Proxy inspects raw protocol bytes for SSH, RDP and SQL Score 40 monitors, 70 freezes input, 150 terminates A frozen session waits for an admin to approve or terminate GUI action detection on RDP Right-click then Delete within 5 s and 500 px scores 80 Window titles flag regedit, Credential Manager and Wireshark Central vault and rotation AES-256-GCM storage, folders, check-in and check-out Scheduled rotation, rotate after use, dual approval Zero standing privilege Just-in-time grants with ticket, justification and auto-expiry Break-glass override logged and alerted at high priority Session intelligence and replay Risk verdict, event timeline and searchable commands Frame-by-frame replay with a SHA-256 integrity hash Enterprise capabilities Identity and single sign-on OIDC and SAML for Entra ID, Google, Okta and OneLogin TOTP MFA, LDAP and AD sync, role mapping on provisioning Governed database access PostgreSQL and Oracle Net proxies with full query audit Per-session temporary accounts, revoked on disconnect Compliance reporting Control-level mapping for ISO 27001, SOX, PCI DSS and HIPAA Each control cites the PAM evidence behind it Immutable audit and SIEM Insert-only audit tables enforced by database triggers Event delivery over HMAC-SHA256 signed webhooks Platform modules
Dashboard Active sessions, risk posture and pending approvals in one view.
Central Vault Credential explorer, reconciliation, rotation, approvals and vault audit.
AI Access Requests access in plain language, checked against policy before it is raised.
Sessions Live sessions, the frozen-session queue and forensic replay.
Command Search Searches every command and query across all recorded sessions.
Assets Target inventory with discovery scans and one-click onboarding.
PAMGuard Agents Trigger registry, scoring weights and enforcement thresholds.
Users and Roles Role definitions and the menu each role may see.
Policies Access rules, custom guard rules and input monitoring settings.
Access Hub Requests, approvals, just-in-time windows and break-glass grants.
Compliance Hub Framework scoring, control status and access certification campaigns.
Behaviour User baselines and the anomalies raised against them. Technical specifications Architecture Proxy-only gateway; Node.js control plane, Go SSH proxy Target agents None: all inspection happens at the proxy Protocols SSH, RDP over HTML5, PostgreSQL, Oracle Net Encryption AES-256-GCM at rest; JWT HS256 with a revocation list Recording S3-compatible or local storage, SHA-256 hash per recording Deployment Cloud, on-premises and hybrid; Docker Compose Integrations SIEM webhooks, Jira, ServiceDesk, Microsoft Teams, LDAP Editions Basic, Moderate and Pro, enforced by a signed licence
Framework mapping Evidence mapped to access control and logging requirements. Whether a control is met depends on your configuration, scope and assessor.
Rudratic Technologies Ltd · London and Chennai · info@rudratic.com · rudratic.com/products/swot-pam
Book a demo All datasheets