Security Designed Into Every Layer
ExaGuards holds some of your clients' most sensitive information, from passwords to remote access. Protection is built in from the sign-in screen to the audit log.
Your Clients Trust You. You Should Be Able To Trust Your Tools.
An IT platform is a high-value target: it knows where every server is, holds the passwords to reach them and can open sessions to them. ExaGuards is designed so that access is verified, limited to what each person needs, encrypted where it matters and recorded.
These protections are part of the platform for every customer, not an add-on tier.
Verified Access
| Feature | Details |
|---|---|
| Two-step verification | Email code, SMS code or an authenticator app. Codes are checked by the server and stored hashed, with attempt limits and a resend throttle. |
| Trusted browsers | After a successful code, only that browser can skip the code next time. |
| Safe recovery | You cannot remove your authenticator app if it is your only second factor, and clock-skew help explains codes that arrive at the wrong moment. |
| Sessions | Signed sessions checked for issuer and audience; the token used before two-step verification cannot be used for anything else. |
Least Privilege By Default
| Feature | Details |
|---|---|
| 67 permissions | Each permission is enforced on the page, in the data and in the menu. If permissions cannot be loaded, nothing is allowed. |
| Computer visibility by position | Rules per position and per person decide which computers each person can see, with a test run that explains every decision. The same rules apply on the web, in remote desktop and in the mobile app. |
| Server hardware permissions | View, Manage and Control for iLO, iDRAC and ESXi must be granted explicitly. |
| Multi-tenant separation | ExaGuards administrators, your company and your clients' contacts each have their own level of access, and each customer's data is kept separate. |
Protected Data, Trusted Software
Per-customer keys
- Customer data encrypted with your own master key
- Background services cannot decrypt it
- Alerts, insights and BMC traffic sealed with your key
Signed agent releases
- Signed manifest and checksums for every file
- Unlisted files are rejected
- Signed deployment scripts
Safe updates
- Staged rollout to a percentage first
- Automatic rollback if unhealthy
- Releases held back after repeated rollbacks
Protected links
- Estimate approvals rate-limited
- One-time secrets expire after viewing
- Single-use tokens for the RDP gateway
A Record Of Who Did What
Remote & management
- Remote desktop sessions
- Remote PowerShell commands
- iLO, iDRAC and ESXi changes
- RDP gateway sessions
Data & records
- Credential access
- Script and job changes
- Tickets, invoices, estimates, orders
- Domains and uptime monitors
Viewing & people
- Screen recording views
- Activity Insights views
- Sign-in and sign-out events
- Who acknowledged each alert
Remote Access Without Leaving Doors Open
The browser RDP gateway uses 90-second single-use tokens and an audit log, and the Remote Desktop password never leaves your browser. Agent remote sessions can be recorded and each remote capability can be switched off per computer.
Is two-step verification required?
ExaGuards sign-in includes two-step verification by email, SMS or authenticator app, enforced by the server.
Who can see our data?
Your data is separated by customer, encrypted with your own key where it is sensitive, and controlled inside your company by 67 permissions and computer visibility rules.
How do you protect the agent itself?
Releases are signed and every file is checked; unlisted files are rejected, and a new version that does not report healthy is rolled back.
Is access recorded?
Yes. Remote sessions, PowerShell, server-hardware changes, credential access, recordings viewed and more are logged.
Can we see this in detail?
Yes. We are happy to walk through ExaGuards' security design in a demo.
Works Even Better Together
Every product line shares the same clients, devices, people and login.
ExaGuards RMM
Monitor, manage and fix every Windows computer and server.
Explore →ExaGuards EDR
Endpoint security: detect, block, alert and respond.
Explore →ExaGuards Network
Discover, document and manage everything on the network.
Explore →ExaGuards Uptime Monitor
36 check types from the cloud or inside the network.
Explore →ExaGuards Service Desk
Tickets, email, SMS and alert notifications.
Explore →ExaGuards Docs
Credentials vault, knowledge base and diagrams.
Explore →ExaGuards Business
Orders, estimates, invoices and bookkeeping.
Explore →ExaGuards HR
Timesheets, overtime, payroll hours and requests.
Explore →Talk To Us About Security
We are happy to walk through how ExaGuards protects your data in a demo.
