For IT teams
Roll it out in an afternoon.
No appliances to rack, nothing to scale and nothing to patch at the edge. People sign in with the account they already have, and the rules follow them to every device.
| Person | Groups | Source | Devices |
|---|---|---|---|
| Maria Okafor | Finance | SCIM | 2 |
| Lena Park | Engineering, On-Call | SCIM | 3 |
| Sam Reyes | Contractors | Invited | 1 |
Less to run, fewer tickets.
The work that usually lands on IT, handled by the product.
Your directory, read properly
SCIM pushes users and groups, and we query your directory too, so nested groups and distribution lists still count.
One agent to deploy
Fowlguard Connect on Windows, macOS and Linux, configurable with your MDM tools.
Requests without tickets
People ask for access, and you approve with one click. The grant expires on its own.
Rollout you can see
The console shows which devices have picked up the current policy.
Posture you can read
Each device is Compliant, Failing or Not Reported, and the row says what failed.
Nothing to be down
The rules are already on the device, so filtering carries on if our service is unreachable.
A normal week with Fowlguard.
A new starter is productive in minutes.
They appear through SCIM with their groups, install Connect and sign in. Their access follows from their groups.
| Person | Groups | Source | Devices |
|---|---|---|---|
| Maria Okafor | Finance | SCIM | 2 |
| Lena Park | Engineering, On-Call | SCIM | 3 |
| Sam Reyes | Contractors | Invited | 1 |
A laptop falls out of compliance.
The Device Posture page names the failing check. The owner fixes it, the device checks in again and the row clears.
| Device | Owner | Failing Check | State |
|---|---|---|---|
| HP-FIN-014 | Maria Okafor | — | Compliant |
| MBP-ENG-022 | Lena Park | Disk encryption off | Failing |
| LNX-OPS-003 | Sam Reyes | — | Not Reported |
Someone needs a server for an afternoon.
They request it with a reason. You approve it for four hours and move on.
- Who
- Sam Reyes · Contractors
- Wants
- git.internal
- For
- 4 hours
- Reason
- Release branch review
Which identity providers work?
Google, Microsoft, and any provider that speaks OIDC or SAML 2.0, with SCIM for users and groups.
Do we need to change our network?
No. You do not choose network ranges, pick a region or configure a gateway. Systems behind a Router are reached without being published to anything.
How do servers join?
A server has nobody to sign in as, so it activates with a server licence key instead of an invitation.