Mapped
SOC 2
Controls mapped to the Trust Services Criteria: security, availability, processing integrity, confidentiality and privacy.
We build the audit trail before the incident.
OmniPriv was built by people who had already run privileged access programmes and watched the same failure repeat: the controls existed on paper, and the evidence did not exist at all.
So the record came first. Every privileged action produces something an auditor can follow, every secret is encrypted and vault-managed, and the whole platform runs on infrastructure you control rather than ours.
Why OmniPriv exists
On infrastructure you controlillustrative
- capability modules over one policy engine
- 9capability modules over one policy engine
- compliance frameworks mapped out of the box
- 6compliance frameworks mapped out of the box
- hard-coded credentials inside the platform
- 0hard-coded credentials inside the platform
- inbound ports to open on managed systems
- 0inbound ports to open on managed systems
What we build
Nine capability modules over one policy engine and one audit trail, the same list the platform index is generated from.
6 capabilities
Secure AI Agents
Scoped privilege, tool allowlists and recorded sessions for every AI agent
Explore10 capabilities
Infrastructure & Deployment
Flexible on-premise deployment across any enterprise environment
Explore10 capabilities
Password & Credential Management
Automated credential lifecycle management at enterprise scale
Explore10 capabilities
Application Security & Encryption
AI-powered credential protection with enterprise-grade encryption
Explore7 capabilities
Enterprise & Identity Integration
Seamless integration with your existing enterprise ecosystem
Explore14 capabilities
Secure Remote & Hybrid Access
Privileged remote access for a distributed workforce
Explore9 capabilities
Workflow & Access Control
Structured, policy-driven privileged access with full approval governance
Explore5 capabilities
Audit, Governance & Compliance
Complete privileged account accountability for regulatory and internal requirements
Explore6 capabilities
Defend Against AI-Driven Threats
Machine-learning detection and automated response at the privileged-access layer
ExploreBuilt to be deployed, not demoed
A privileged access platform only counts once it is running against real systems, so the deployment model is treated as part of the security argument rather than an implementation detail. OmniPriv runs where your other critical systems run, and it asks nothing of the machines it protects.
- On-premise deployment across VMware, Red Hat and OpenStack as a hardware-agnostic appliance
- Multi-node clustering with container health checks, heartbeat monitoring and database replication
- Strict multi-tenancy through org_id isolation on every resource, schema-per-tenant
- Layered key protection, with an external installation key you hold
- Break-glass emergency procedure and granular credential restore without a full system restore
Architecture · one applianceillustrative
- Nine capability modulescredentials · sessions · workflow · audit · threat · more
- One policy engineevery request decided in one place
- One credential storeencrypted at rest and in transit
- One audit trailtamper-proof, hash-chained
- Software applianceclustered, health-checked, replicated
your infrastructure, your hardware
Mapped to the frameworks you report against
We would rather be checked than believed. These are the frameworks the platform's controls are mapped to out of the box.
Controls mapped out of the box
- SOC 2
- ISO 27001
- NIST SP 800-53
- HIPAA
- PCI DSS
- SOX 404
Mapped
ISO 27001
Controls mapped to the ISO 27001 information security management requirements, across platform operations and development.
Mapped
PCI DSS
Controls mapped to PCI DSS requirements for environments that handle payment card data.
Mapped
NIST SP 800-53
Controls mapped to the federal security and privacy control catalogue that regulated environments are assessed against.
What we hold ourselves to
These are positions on how the product gets built, not claims about how many people work here.
Security is not a trade-off
Security does not lose to shipping speed. The platform itself holds zero hard-coded credentials, and every secret it uses is vault-managed and auditable.
Built for hard environments
Designed for on-premise estates in financial services, healthcare, government and energy, where the network cannot be re-architected around a vendor.
Evidence over assertion
Control mappings are published rather than implied, so a capability can be checked instead of taken on trust.
You hold the keys
The installation key is generated at installation and stored independently of the platform, so a compromise of our storage is not a compromise of yours.
See what the platform does before you take our word for it
- On-premise
- Mapped to your frameworks
- Yours to run
Nine modules, one audit trail, and a deployment model that matches the infrastructure you already run.
We will walk through the capability set and the control mappings against your own environment.
Frequently Asked Questions
Have a question that is not here?
Talk to the OmniPriv team about your identities, systems and AI agents.
Request a DemoOn-premise, regulated environments that need to prove what happened to a privileged account. The platform covers the full privileged access lifecycle, vaulting, session control, approval workflow, integration and audit, in nine capability modules that share one policy engine and one audit trail.
No. Privileged connections are brokered through the platform rather than intercepted at the machine, so an inbound port does not have to be opened on the target system.
SOC 2, ISO 27001, NIST SP 800-53, HIPAA, PCI DSS and SOX 404. Controls are mapped out of the box to those same six frameworks, and reporting templates are available pre-formatted for each of them.
You do. Data is encrypted at rest and in transit, with a layered key hierarchy protecting stored keys. The installation key is generated at installation and must be stored externally and independently of the platform, then carried forward across upgrades and migrations.
The platform index lists every module, and the specification covers deployment model, architecture, supported protocols, high availability, multi-tenancy, encryption, approval principles and disaster recovery. We can also walk through it against your environment on a call.
