Product
From request
to recorded session.
Short-lived access, with policy and evidence built into the workflow.
Supported today: PostgreSQL, MySQL, MongoDB, Redis, SSH (Linux), Kubernetes, AWS.
Request and preview
See whether your request will be approved, denied or auto-approved before you submit it.
Approve anywhere
Approve requests in the web, Slack or CLI. Separation of duties is built in: you can't approve your own request.
Connect
Start SSH and database sessions through the browser or CLI. Each session gets its own credential, created when it starts and removed when it ends.
Record and replay
Searchable session recordings let you find and replay what happened. Requests, decisions and sessions are logged in the audit trail.
Policy as code
Write access policy with OPA. Ephemis fails closed: if the policy engine can't be reached, access is denied.
Break-glass
Emergency access with mandatory review afterwards.
Also included
Secrets vault, key management and certificates.