IT security

Remote access with a moat: approved, short-lived, audited

Remote access is where IT tooling is most often attacked. Keepstone is built so the only way in from outside is approved, short-lived and recorded, and so your company's data never shares a database with anyone else's.

Book a consultation

What you get

  • Approval before access

    Agents enrol with expiring tokens, then wait. A head admin must approve each PC.

  • Short-lived encrypted tokens

    Connection tokens use AES-256-GCM, last 60 seconds and work once.

  • MFA on privileged actions

    Connecting needs a recent second factor and a dedicated permission, separate for remote desktop and Remote Assist.

  • Signed installer, outbound only

    The agent is a signed installer, deployed by Group Policy. PCs make outbound connections only.

  • Your own keep

    Your own database, sign-in, keys and gateway. No neighbour's data to leak into yours.

  • Alerts and a full audit trail

    Tamper, stopped agents and rejected connections raise alerts. Approvals, sessions and downloads are logged.

Questions, answered

Can Keepstone run commands on our PCs?

By default the agent only reports inventory. Software and restart actions are an opt-in setting per PC, limited to a fixed list of signed, audited actions.

Where can I read the security details?

Each release ships a security outline and a privacy outline. Ask for them during the consultation.

Is the data shared between customers?

No. Every customer has its own deployment with its own database, sign-in, keys and gateway.

IT Security: Secure Remote Access with MFA · Keepstone