xPanoptesBuilt for teams that answer to auditors
Permissions are checked on the server for every request, and every change is in the audit log. Device changes need a second person, and the AI explains but never acts.
Who can sign in, and what they see
Permissions are checked on the server for every request. What the browser or the phone shows is only a convenience.
Roles per site
Built-in roles (Super Admin, Network Admin, Operator, Observer) and your own custom roles, granted per site. Users see only the devices of their own sites.
Two-factor sign-in
Authenticator codes are required for every user by default. Each code works only once, and recovery codes are shown once.
Confirmation for risky actions
Approvals, upgrade campaigns, agent commands and resets ask for your password and a current code again.
Lockout and sessions
Repeated failures lock the user name and the source address. Sessions end after an idle timeout and when access is reduced.
Optional IP allow-list
Limit sign-in to your own networks. xPanoptes refuses a list that would lock out the administrator editing it.
No hidden vendor login
Support access is opened by your administrator, for a role and a time limit you choose (at most 72 hours), and closes by itself.
Nothing changes a device on one person's word
Device changes are requested, approved and run as audited jobs, and are never retried automatically.
Four-eyes approval
Software upgrades, campaigns, port fixes, IDS rule updates and agent configuration deployments wait for approval by a second person. Self-approval is off by default.
AI never runs commands
The AI explains likely causes and may show commands as text for an engineer to run. The platform never sends that text to a device, and no button runs it.
Recorded terminal sessions
The browser SSH terminal opens with your password and an authenticator code. Full sessions are for Super Admins only. Read-only sessions are checked line by line, and every session is recorded.
Facts only to the AI
The AI is optional and turned on by your administrator, who chooses the provider. It receives facts and findings that the asking user may see, never configurations or credentials. The key goes only to the chosen provider.
Signed agent commands
The xPanoptes Agent signs its requests and accepts only commands signed by your xPanoptes server. Configuration secrets stay on the device.
Guards on risky fixes
Uplinks are refused for port fixes, and a port with another switch or router behind it cannot be shut down.
A record you can show an auditor
Your data stays on your server, and every change leaves a trace.
Append-only audit log
Every change and every denied attempt, with user, time, source address and result. No API or role can edit or delete an entry. Exports are audited too.
Secrets protected
Device and integration credentials and keys are encrypted at rest and never shown again. Logs and audit details are redacted.
Your data stays with you
Polling, configurations and history stay on your server. Notifications carry only what is needed, never management addresses, credentials or configurations.
Updates and licences you can verify
You receive released software, signed by the vendor and checked on your server.
Signed updates
Release manifests are signed by the vendor and verified by the application and again by the host updater. Images are pulled by digest, and offline packages are checked against their checksum.
Release images only
Installations run released images that contain no source code, tests or build tools. Updates roll out without downtime, after an automatic backup.
Signed licences
Licence files are signed and checked offline on your server. Editing a licence breaks its signature, and nothing needs to call home.
The one exception: a Super Admin's full SSH terminal session sends what they type to the device. That is why it requires a password and an authenticator code, and why every session is recorded and audited. Everyone else gets read-only sessions.
Questions from your security team?
We are happy to walk your security team through the security model in a demo.