An ISO 9001:2015 Certified Organization
ARCON | PAM Suite
A full-blown solution with a scalable architecture, covering the core capabilities an organisation needs to reach a PAM maturity model.
Privileged identity security
ARCON | PAM offers the range of core features and functionality required to attain a PAM maturity model. A full-blown solution with scalable architecture ensures impregnable privileged identity security.
Banking organisations, government agencies and healthcare chains, among many other vertical markets, trust ARCON | PAM for building a robust IAM and compliance framework.
Core capabilities
Onboard users from Microsoft AD, AWS, Azure and GCP, and add new server groups and privileged accounts to a single PAM instance. Auto discovery finds every privileged ID and device, so orphaned accounts spread across a heterogeneous IT environment stop being a blind spot.
Reinforce security and enforce zero-trust principles with MFA. Built-in dual-factor authentication is joined by integration with Google Authenticator, Microsoft Authenticator, ARCON Authentication, hardware tokens, facial recognition, biometrics and traditional SMS or email OTP.
One-time secure administrative access to web, on-premise legacy and cloud applications without managing multiple sets of credentials. ARCON SSO supports the standard protocols: OAuth 2.0, OpenID Connect (OIDC) and SAML.
Grant access on a need-to-know and need-to-do basis. Privileged users are managed by role, responsibility and task, enforcing least privilege and reducing the risk of unauthorised access to sensitive systems and data.
Manage and protect the credentials, SSH keys and secrets used to reach privileged accounts, with vaulting, randomisation and controlled retrieval for interactive access to target systems.
Monitor, terminate and record privileged sessions. Real-time threat detection and response protect critical sessions, with audit trails for every command fired and file accessed.
PAM maturity model
Discover
Auto discovery locates privileged IDs and devices across AD, AWS, Azure and GCP, so nothing is left orphaned.
Onboard
Server groups and user accounts with privileges are onboarded into a single PAM instance.
Authenticate
Dual-factor authentication and third-party MFA tools apply zero-trust principles before a session opens.
Authorise
Access is granted by role, responsibility and task on a need-to-know and need-to-do basis.
Vault
Credentials, SSH keys and secrets are vaulted, randomised and retrieved under control.
Audit
Sessions are monitored, recorded and terminated where needed, with audit trails of commands and files.
Implementation detail
Users can be onboarded from Microsoft Active Directory and from AWS, Azure and GCP networks, and new server groups and privileged user accounts can be added to the same PAM instance.
Built-in dual-factor authentication, plus Google Authenticator, Microsoft Authenticator, ARCON Authentication, hardware tokens, facial recognition, biometric authentication and traditional SMS or email OTP.
ARCON SSO supports the standard identity-based authentication protocols: OAuth 2.0, OpenID Connect (OIDC) and SAML.
Privileged sessions are monitored and recorded, with audit trails covering every command fired and every file accessed, alongside real-time threat detection and response.
Banking organisations, government agencies and healthcare chains, among many other vertical markets, use ARCON | PAM to build a robust IAM and compliance framework.
PAM solution
We will run a discovery exercise across your directories, servers and cloud accounts and show you what is unmanaged today.
