Masterandsecureyourprivilegedaccess
A single, unified control plane for real-time asset management, credentials, authorization, and auditing.
- Free automatic weekly zero-trust backups
- AI-managed Vault & Session Recording
- Auto malware & dynamic SQL masking
teams that ship
Okta
Google Workspace
GitHub
Splunk
Datadog
PagerDuty
Terraform
Ansible
Kubernetes
CiscoFour pillars of privileged access
Everything a modern PAM+ needs — discover, vault, authorize, audit. Built open-core so your security team owns the crypto and the logs.
Unified inventory of servers, databases, network devices, K8s clusters and cloud consoles — auto-discovered and tagged.
Vault every privileged account. Just-in-time checkout, TTL-bound access and zero standing privileges by default.
Command-level RBAC with approval workflows, MFA step-up and time/geo policies enforced at the proxy.
Immutable session recordings with OCR search, keystroke timelines and forensic export ready for SOC 2 & ISO.
Visibility, governance and posture — API-first
Three modules on one identity graph. They connect straight to your platforms over their APIs; the GuardVault engine stays where it belongs, brokering privileged sessions.
Every identity, human or not, in one graph
GuardVault pulls each platform over its own API and correlates every account — employees, contractors, service accounts, API keys and AI agents — into a single identity.
- Employees, external collaborators and non-human identities side by side
- Cross-platform correlation by email, UPN or canonical key
- Ownerless and dormant accounts surfaced automatically
- No agent, no collector to deploy
Okta
Google Workspace
GitHubScale with your fleet.
Move the sliders — the Business tier price updates instantly.
Standard billing starts at 25 assets. After the 14-day trial, tenants without an active subscription are automatically locked until payment.
- Up to 10 assets
- Full Standard features
- Auto-locks after day 14
- Convert to paid anytime
- 50 assets · 10 admins
- 5,000 sessions / mo
- Vault + rotation + TACACS+
- SSO + audit export
One platform, every privileged workflow.
Isolated vaults & audit per customer, one control plane.
Dual-control approvals and signed session evidence.
Column masking and dual-unseal break-glass flows.
Ephemeral kubeconfigs and role brokering with TTL.
Plugs into your stack.
SSO, SIEM, ticketing, chat, IaC — GuardVault talks to what you already run.
Google WorkspaceOkta
Auth0
Keycloak
Personio
HiBob
Google Cloud
Kubernetes
Terraform
Notion
Atlassian
Zoom
Dropbox
Box
HubSpot
Zendesk
FigmaGitHub
GitLab
Bitbucket
Jenkins
Docker
Splunk
Datadog
Grafana
Elastic
PagerDuty
Opsgenie
Jira Service Management
Cloudflare
SAP
StripeAnswers before you ask.
No permanent free tier. Every new tenant gets a 14-day trial of the Standard plan with up to 10 assets; after day 14 the tenant is auto-locked until a paid subscription is active.
GuardVault proxies SSH/RDP/DB traffic transparently and records keystrokes and frames. Recordings are hash-chained and searchable via OCR.
Yes. GuardVault runs on Docker or Kubernetes, on your infrastructure. FIPS and air-gap builds are available on Enterprise.
Okta, Azure AD/Entra, Google Workspace, generic SAML and OIDC, plus LDAP and SCIM for provisioning.
AES-256-GCM with per-tenant KEKs, optional HSM or KMS integration and Shamir-secret-shared root keys.
Yes — a 14-day trial of the Standard plan (up to 10 assets, full features). Paid subscriptions start at 25 assets.
Built in the open, hardened by operators.
Follow releases, propose policies, and share playbooks with thousands of security teams running GuardVault Community in production.