| Linux and Windows servers | SSH and RDP sessions, checked and recorded | | | Discovered and kept as one live record | Workflows over SSH and WinRM |
|---|
| Databases | Queries through the database proxy | | Native audit, risk scores, sensitive columns | | |
|---|
| AWS, Azure and GCP accounts | | Just-in-time console, CLI and API access | RDS, Aurora, Azure SQL and Cloud SQL audit | EC2, RDS, IAM, EKS and S3 inventory | |
|---|
| People and service accounts | Time-bound grants through your SSO | Time-bound cloud roles | A 0–100 risk score per identity | Who can log in to each host, and attack paths | |
|---|
| IT runbooks and changes | | | | | Live runs, approval gates, an audit ledger |
|---|