Security is Our Foundation

OmniPriv is built with security at its core, from AI-native architecture and end-to-end encryption to controls mapped to the major compliance frameworks.

Request a Security BriefingReport a Vulnerability
compliance frameworks the controls are mapped to
6compliance frameworks the controls are mapped to
security principles applied at every layer
4security principles applied at every layer
overlapping controls, from network to supply chain
8overlapping controls, from network to supply chain
audit rows per HMAC-SHA256 integrity checkpoint
50audit rows per HMAC-SHA256 integrity checkpoint

Security Principles That Never Compromise

AI-Native Security Architecture

OmniPriv implements AI-native security at every layer. No user, device, or network is inherently trusted. Every access request is authenticated, authorized, and logged, regardless of origin.

  • Verify every identity before granting access
  • Enforce least-privilege on every session
  • Assume breach and log everything
  • Micro-segment privileged access

End-to-End Encryption

All data in transit is encrypted, and all stored data, credentials, session recordings and audit logs, is encrypted at rest. Keys sit in a layered key hierarchy (KEK, DEK, SEK) rather than alongside the data they protect.

  • Encryption for all transport-layer communications
  • Encryption at rest for every stored artefact
  • Layered key hierarchy: KEK, DEK and SEK
  • Per-tenant encryption key isolation

Strong Identity Assurance

OmniPriv enforces multi-factor authentication on every privileged session. Combined with SSO integration and contextual risk scoring, every access event is tied to a verified identity.

  • TOTP, FIDO2/WebAuthn, and pushbutton MFA
  • Identity risk scoring and adaptive authentication
  • Phishing-resistant hardware key support
  • Session re-authentication for sensitive operations

Immutable Audit Trail

Every privileged action produces a tamper-proof record. Cryptographically signed logs cannot be modified or deleted, even by administrators. This provides irrefutable evidence for forensic investigations and compliance audits.

  • Cryptographic signing of all session logs
  • Write-once storage for audit records
  • Chain-of-custody preservation
  • Real-time SIEM streaming

Defense in Depth

Multiple overlapping security controls at every layer of the stack.

  • Network Isolation

    OmniPriv acts as a network proxy. Target systems are never directly exposed. All connections route through the controlled bastion layer.

  • Anomaly Detection

    Machine learning-based behavioral analysis detects unusual command patterns, access times, or data volumes, triggering automated alerts and session termination.

  • Automated Secret Rotation

    Eliminate long-lived credentials. OmniPriv rotates passwords, SSH keys, and API tokens automatically, on schedule or post-session.

  • Role Separation

    Segregation of duties prevents administrators from accessing audit logs or modifying session recordings. Security and operations roles are enforced by the platform.

  • Hardened Infrastructure

    OmniPriv's platform components are deployed with CIS Benchmark hardening, minimal attack surface, and regular vulnerability scanning.

  • Secure Credential Storage

    The built-in credential vault encrypts every stored secret. No credentials are ever stored in plaintext.

  • Vulnerability Management

    Continuous CVE monitoring with automated patch deployment.

  • Supply Chain Security

    All software components are verified with cryptographic signatures.

Mapped to the Frameworks You Report Against

OmniPriv's access, audit and encryption controls are mapped to the major security and compliance frameworks.

  • SOC 2 Mapped

    Controls mapped to the Trust Services Criteria: security, availability, processing integrity, confidentiality, and privacy.

  • ISO 27001 Mapped

    Information security management controls mapped to ISO 27001 across OmniPriv platform operations and development processes.

  • NIST SP 800-53 Mapped

    Controls mapped to the federal security and privacy control catalogue used as the baseline for regulated environments.

  • HIPAA Mapped

    Business Associate Agreement (BAA) available. Controls mapped to the HIPAA Security Rule.

  • PCI DSS Mapped

    Controls mapped to PCI DSS requirements for environments that handle payment card data.

  • SOX 404 Mapped

    Access governance and audit controls mapped to Section 404 financial-reporting requirements.

Found a Security Vulnerability?

We take all security reports seriously. Contact our security team at security@omnipriv.com. Please share the details privately so we can investigate and coordinate a fix before anything is made public.

  1. Report privately
  2. We investigate
  3. Coordinated disclosure
Email security@omnipriv.comRequest a Security Briefing