Product tour

See the whole thing in five minutes.

Five stops, from the first sign-in to a rule that is enforced and logged. Every screen below is the real product layout with example data.

Start free Tour the console
Console›DashboardEXAMPLE
AreaWhat it shows
My AccessSystems you can reach
UsersPeople and groups
EndpointsEvery enrolled device
Access RequestsWho is waiting on you
LogsAccess, audit and endpoint
Stop 1 · Sign in

People use the account they already have.

Your organisation signs in through Google, Microsoft or your own SAML 2.0 provider. Users and groups can arrive by SCIM, so nobody is typed in twice.

  • Email first, then your organisation's sign-in
  • A second factor from an authenticator app
  • Join rules decide who may sign up with your domain
identity.fowlguard.comEXAMPLE
Sign in to Harbor & Pine
lena.park@harborpine.example
Continue with Microsoft
Continue with Google
Your organisation uses single sign-on. A code from your authenticator app may follow.
Stop 2 · Connect

One app on the device does the work.

Fowlguard Connect brings up the tunnel and holds the rules on the device. Press Connect, sign in when the browser opens, and you reach the systems you have been granted.

  • Windows, macOS and Linux
  • Device posture reported by the device
  • Ask for access from the app
Fowlguard ConnectEXAMPLE
Connected
Harbor & Pine · lena.park
On
Device
HP-LAP-042 · Compliant
Can reach
2 systems
Web rules
Enforced on this device
Request access to a system…
Stop 3 · Write a rule

Say who, what and what happens.

Rules are categories, hostnames and keywords, scoped to a person or a group. Global rules set the floor, and a group's rules are merged over them.

  • Rules apply in the order shown
  • One answer where two overlap
  • Your own categories alongside ours
Internet Access›Web Access PolicyEXAMPLE
Applies To
Contractors
Category
File Sharing
Action
Block
Mode
OffReportBlock
Stop 4 · Watch it

Report-only shows who it would stop.

A new rule can run in report-only. The logs show what it would have caught, and nobody loses access while you check.

  • See the effect before anyone is blocked
  • Fix the rule, not the fallout
  • Write your block page before you switch
Logs›Access LogsEXAMPLE
TimePersonSiteResult
09:41Sam Reyesshare.example.netWould Block
09:40Lena Parkdocs.harborpine.exampleAllow
09:38Sam Reyesfiles.example.orgWould Block
Stop 5 · Enforce

Switch it on, and the log names the rule.

When the rule is right, move it from Report to Block. Every entry in the log says which rule decided it, so a question about a block has a one-line answer.

  • Access, audit and endpoint logs
  • A blocked page offers a way to ask for access
  • Log streaming on the Medium plan
Logs›Access LogsEXAMPLE
TimePersonSiteResultRule
10:02Sam Reyesshare.example.netBlockContractors: File Sharing
10:01Mei Tandocs.harborpine.exampleAllowGlobal
09:58Sam Reyesfiles.example.orgBlockContractors: File Sharing
The platform

Four products. One answer to who someone is.

Each product is useful on its own, and they all share the same identity, rules and agent.

Private Access

Zero-trust access to your own servers and subnets. Peer-to-peer where the network allows, with a relay where it refuses.

Private Access

Internet Access

Categories, hostnames and keywords, per person or group, decided on the device.

Internet Access

Application Control

Crawlers, scripts, CI runners and AI agents, named and owned.

Application Control

Fowlguard Remote

RDP, SSH and WinRM to a machine you have been granted, over the same tunnel and with no port left open.

Fowlguard Remote

Identity

OIDC · SAML 2.0 · SCIM · TOTP · Google · Microsoft

Identity

Device Posture

Encryption, antivirus and management, checked before a device is trusted.

Device Posture

Productivity In development

Mail, docs, sheets and meetings on the same identity.

What we are building