Native wire-protocol proxies for shells, desktops, databases, Kubernetes, cloud consoles, network devices and files — no agents, no jump hosts, no VPN. Your admins keep using the tools they already know.
Full-fidelity SSH, RDP and VNC brokering with keystroke and frame recording, command filtering and step-up MFA — all agentless.
OpenSSH-compatible proxy with ephemeral cert issuance, keystroke capture and command policy.
$ guardvaultctl connect ssh linux-01Windows RDP proxy with 60 fps frame capture, OCR-searchable recordings and web-based client.
$ guardvaultctl connect rdp win-jump-03TightVNC/RealVNC compatible with frame recording and clipboard policy.
Legacy Telnet with mandatory session recording and command filtering for OT networks.
Windows Remote Management proxy for PowerShell Remoting with cmdlet-level policy.
Console-server integration for out-of-band access to network devices and BMCs.
| Category | Protocols | Recording | Command policy | Masking |
|---|---|---|---|---|
| Remote access | SSH · RDP · VNC · Telnet · WinRM · Serial / SoL | — | ||
| Databases | PostgreSQL · MySQL · MSSQL · Oracle · MongoDB · Redis · MariaDB · ClickHouse | |||
| Kubernetes | kubectl exec · kubectl port-forward · K8s API · Helm | — | ||
| Cloud consoles | AWS Console · AWS CLI / SDK · Azure Portal · GCP Console · GitHub / GitLab | — | ||
| Network devices | TACACS+ · RADIUS · Cisco IOS / NX-OS · Juniper Junos · Fortinet FortiOS · Huawei VRP · Arista EOS | — | ||
| File transfer | SFTP · SCP · S3 · FTPS | — | ||
| Web & SaaS | SAML 2.0 · OIDC / OAuth2 · Form-fill · HTTP(S) proxy | — |