A fresh system for every session.
Let users launch exactly the machine, container or service they need, just for the session. The gateway creates it, signs in with one-time credentials, records everything, and destroys it when the session ends or its time runs out.
What you get
Templates you control: Docker images, Kubernetes pods, AWS EC2 AMIs, Azure VM images and VMware vSphere templates, each with its protocol and access rules.
No standing infrastructure, no standing credentials: one-time credentials per session, never shown.
Guardrails: maximum lifetime, and limits on concurrent environments per user and per template.
Full evidence: the session recording, plus every lifecycle step (created, connected, destroyed) in the audit log.
Use cases
- Vendor sandboxes
- Incident forensics on a clean jump box
- Training labs
- Testing against production-like images
Set up
- 01
Connect your platform (Docker, Kubernetes, AWS, Azure or vSphere)
- 02
Define templates
- 03
Grant who may launch them, standing or by request
- 04
Users launch from their list.
Prove it on your own systems.
A proof of concept runs inside your environment, on the systems you choose, with success criteria agreed up front.
- 01Scope call
- 02Deploy & connect your systems
- 03Review the evidence together