Masterandsecureyourprivilegedaccess
A single, unified control plane for real-time asset management, credentials, authorization, and auditing.
- Free automatic weekly zero-trust backups
- AI-managed Vault & Session Recording
- Auto malware & dynamic SQL masking
teams that ship
Okta
Google Workspace
GitHub
Splunk
Datadog
PagerDuty
Terraform
Ansible
Kubernetes
CiscoFour pillars of privileged access
Everything a modern PAM+ needs — discover, vault, authorize, audit. Built open-core so your security team owns the crypto and the logs.
Unified inventory of servers, databases, network devices, K8s clusters and cloud consoles — auto-discovered and tagged.
Vault every privileged account. Just-in-time checkout, TTL-bound access and zero standing privileges by default.
Command-level RBAC with approval workflows, MFA step-up and time/geo policies enforced at the proxy.
Immutable session recordings with OCR search, keystroke timelines and forensic export ready for SOC 2 & ISO.
Scale with your fleet.
Move the sliders — the Business tier price updates instantly.
Standard billing starts at 25 assets. After the 14-day trial, tenants without an active subscription are automatically locked until payment.
- Up to 10 assets
- Full Standard features
- Auto-locks after day 14
- Convert to paid anytime
- 50 assets · 10 admins
- 5,000 sessions / mo
- Vault + rotation + TACACS+
- SSO + audit export
One platform, every privileged workflow.
Isolated vaults & audit per customer, one control plane.
Dual-control approvals and signed session evidence.
Column masking and dual-unseal break-glass flows.
Ephemeral kubeconfigs and role brokering with TTL.
Plugs into your stack.
SSO, SIEM, ticketing, chat, IaC — GuardVault talks to what you already run.
Answers before you ask.
No permanent free tier. Every new tenant gets a 14-day trial of the Standard plan with up to 10 assets; after day 14 the tenant is auto-locked until a paid subscription is active.
GuardVault proxies SSH/RDP/DB traffic transparently and records keystrokes and frames. Recordings are hash-chained and searchable via OCR.
Yes. GuardVault runs on Docker or Kubernetes, on your infrastructure. FIPS and air-gap builds are available on Enterprise.
Okta, Azure AD/Entra, Google Workspace, generic SAML and OIDC, plus LDAP and SCIM for provisioning.
AES-256-GCM with per-tenant KEKs, optional HSM or KMS integration and Shamir-secret-shared root keys.
Yes — a 14-day trial of the Standard plan (up to 10 assets, full features). Paid subscriptions start at 25 assets.
Built in the open, hardened by operators.
Follow releases, propose policies, and share playbooks with thousands of security teams running GuardVault Community in production.