Request a DemoGet your Trial Instance
Get your Trial InstanceRequest a Demo
← All datasheets
AutointelliPRODUCT DATASHEET

Securita360

Privileged access management

Securita360 vaults privileged credentials, brokers browser SSH and RDP sessions without exposing the password, grants approved time-boxed access, controls SSH commands, records sessions and keeps a tamper-evident audit trail.

Securita360 screenshot with sample data
Privileged access overview (sample data). Illustrative.

Benefits to customer

End shared passwordsCredentials are vaulted and injected into sessions, so users never see or copy them.
Least privilege that expiresTime-boxed access on approval ends automatically, even for a live session.
Prove who did whatRecorded sessions replay only through a fresh authorisation, and a hash-chained audit trail exposes tampering.
Stop risky commandsAllow, deny or end the session on SSH commands, with alerts to webhook and email.
Ready for auditorsAudit export to your SIEM in CEF format, plus reports and an integrity dashboard.
Simple to justifyLicensing follows named privileged users, not sessions, targets or credentials.

Key capabilities

Encrypted Password and Secret VaultCredentials are stored with envelope encryption (AES-256-GCM). Plaintext is never returned by an API, never logged and never shown on screen.
Account Onboarding and LifecycleOnboard privileged accounts, verify targets are reachable from approved network ranges, and follow each account through its lifecycle.
On-Demand Password RotationChange the credential on the target, verify the new one works, then commit it to the vault, with a history of every rotation. Available for Linux and Unix accounts over SSH.
RBAC, LDAP/AD and MFARole-based permissions, sign-in through LDAP or Active Directory, authenticator-app MFA and separation of duties.
Agentless Remote AccessLaunch SSH and RDP sessions from the browser. The gateway injects the credential server-side, so nothing is installed on the target and no password reaches the user.
Just-in-Time AccessUsers request time-boxed access with a reason, approvers decide, the grant is re-checked at launch and a live session ends when its grant expires.
Command Control and AlertsDefine which SSH commands are allowed, denied or end the session. Violations are recorded and pushed to webhook and email integrations.
Session Recording and PlaybackSessions are recorded, encrypted at rest and replayed only through a fresh per-request authorisation, with a SHA-256 integrity value.
Tamper-Evident Audit and ReportsAudit events are chained so alteration or deletion is detectable, with an integrity dashboard and SIEM export in CEF format.
Policy, Dashboards and IntegrationsCentral policy, dashboards for command violations and audit integrity, ITSM ticket checks, SIEM over syslog, webhooks and email.

Key differentiators

  1. The password never reaches the browserCredentials are envelope-encrypted and injected on the server into browser SSH and RDP sessions.
  2. Approvals that resist gamingNo self-approval, edits after approval invalidate approvals, and break-glass access is capped and reviewed.
  3. Evidence you can checkEncrypted recordings with SHA-256 integrity values, and a hash-chained audit trail exportable in CEF.
  4. Agentless accessNothing to install on the target system.
  5. Licensed by privileged userNot by concurrent sessions, managed targets, accounts, credentials or gateways.
  6. Self-hostedCredentials, recordings and audit evidence stay under your control.

Deployment architecture

USERSBrowserRequesters, approvers and auditorsACCESSReverse proxyRoutes and secures inbound trafficAPPLICATIONWeb portalAdmin, user and audit viewsAPI control planeVault, policy, approvals, auditSession gatewayBrokered SSH and RDP sessionsDATADatabaseMetadata and auditCacheQueues and coordinationObject storageRecordingsTARGETSLinux and Unix serversSSHWindows serversRDP

Runs as containers for on-premises deployments. Session gateways sit near the target networks.

Deployment, security and integration

On-premises readyRuns in your own data centre or private cloud, so credentials, recordings and audit evidence stay under your control.
Approvals that resist gamingNo self-approval, and the person who reviews an emergency grant is not the one who used it.
Per privileged user licensingLicensing follows the people who use privileged access, not every device or session.
Fits the familyPairs with ITDesk for service management and Unified360 for infrastructure monitoring.

System requirements

Container runtimeDocker Engine with Docker Compose
ServicesPostgreSQL 16, Redis 7 and S3-compatible object storage
NetworkThe gateway must reach target systems over SSH or RDP
UsersA current web browser. Nothing is installed on targets.
Operating system and sizingConfirmed with our team for your session and recording volumes

Licensing model

Securita360 is licensed on a named privileged-user basis.

It is not licensed by concurrent sessions, managed targets, privileged accounts, stored credentials or gateways.

A user with several roles, groups, accounts or devices uses one privileged-user licence.

Part of the Autointelli family

Pair Securita360 with Unified360, ITDesk, IntelliAsset.

CMMI L3ISO 9001ISO 27001ISO 27034GDPR
Autointelli
Aggregate | Automate | Audit
www.autointelli.com
corp@autointelli.com
484, Anna Salai, Thousand Lights West,
Teynampet, Chennai