EZSSH Agentless Just-in-Time Access
Автор: Keytos
Secure your SSH endpoints and reduce costs by using your Azure AD identity for your hybrid cloud
Passwordless SSH with Azure AD MFA
Are you still managing SSH keys manually? Jump into the future with EZSSH which provides password-less Just In Time (JIT) SSH access. With the expanded cloud workloads, digital transformation and shifts to remote work, you can no longer depend on an isolated network to protect your endpoints from attackers. While organizations have taken steps to adopt secure MFA standards for their general user populations, developers with privileged access to critical Linux servers are often overlooked.
Protect Your Hybrid and Multi-Cloud Endpoints
EZSSH uses your already secure Azure AD identity to authenticate users and creates a short term SSH Certificate that will enable you to log in into your Linux Endpoints. Since SSH Certificates are an OpenSSH authentication standard, EZSSH allows you to manage access to any SSH endpoint (Azure, multi-cloud, or hybrid) introducing centralized controls to an otherwise decentralized toolset.
Leverage Existing Azure Security Tools
EZSSH allows you to leverage your existing Azure security by integrating with Azure security tools such as Azure PIM, Azure Networking JIT, and your subscription's RBAC. Improving your Azure overall security while also improving your user's experience by allowing them to use the tools they are used to using everyday.
No Agent Required
With the increase in cyber-attack sophistication, such as the recent Solar Winds attack, the security community was reminded of the risks and challenges associated with using 3rd party tooling and infrastructure. EZSSH was built for a Zero Trust model, which means using native Linux libraries for authentication and no custom code/agents running your servers.
- Reduce onboarding time and cost by removing need to manage SSH keys.
- Seamlessly integrated into Azure.
- Leverage your secure Azure AD identity.
- Reduce audit costs with easy to Audit access logs.
- Remove key management overhead from engineers.
- Reduce insider threat by having Just-in-Time access with appropriate approval workflows.
- Deploys in seconds across your multi-cloud environment.