Scale Octelium to meet your organization's needs

A unified web console for Cluster administrators to manage and monitor the Cluster's resources in real-time at scale.

UI-based policy builder to easily create complex CEL rules from a catalogue of pre-defined conditions.

Test your policies in a safe environment on a specific User, Session, Service and Namespace before deploying them.

Send a request to an MCP or LLM Service from inside the console and watch how the Policies that govern it treat that exact call.

Seamlessly upgrade the Cluster packages from within the web console.

Scalable Octelium Clusters spanning multiple Kubernetes clusters across regions and clouds.

Dedicated structured Authentication logs for every authentication event and Audit logs recording every resource modification in the Cluster.

Scalable OpenTelemetry collectors that export logs and metrics to major SIEM providers like Datadog, Splunk, Grafana, Elastic, and others in real time.

Recorded SSH sessions, replayable in the console beside the Access Log entry that authorized them.

Cluster and per-Service metrics queried in the console, broken down by User, Session, Service and Policy, with summaries and top-N views.

Logs and metrics are stored and indexed inside the Cluster, so the console can list, filter and aggregate them without a second system.

Live Sessions, Devices and Services across every Region in one view, so the state of the whole Cluster is visible without querying it resource by resource.

Synchronize Users and Groups from one or more directory providers (Microsoft Entra ID, Okta, and others) simultaneously.

Google Workspace and Keycloak directories polled on an interval you set, alongside the OIDC and SAML 2.0 single sign-on every Cluster already has.

Device posture management integrated with CrowdStrike and additional EDR vendors on demand.

The set of Services and Namespaces that can be requested, so a request is a selection from a list rather than a description of what somebody wants.

Requests made from the access portal with a reason, an urgency and a duration, evaluated by rules that deny, auto-approve or send them for review.

Reviewers named individually or by Group, per step, with any-of, all-of or a required count, a timeout, and a defined outcome when the timeout is reached.

An approved request carries both the Policies it grants and a maximum duration, so elevation is scoped as well as temporary and it ends without anyone remembering to revoke it.

Automatic, scalable Secret encryption at rest with integrations for AWS KMS, Google Cloud KMS, Azure Key Vault, HashiCorp Vault, and additional providers on demand.

Automatic public DNS management for BeyondCorp-exposed Services via Cloudflare, AWS Route 53, and custom providers on demand.

Automatic issuance and rotation of TLS certificates for all Services via Let's Encrypt and other public CAs on demand.

Replica counts for the horizontally scalable components set as configuration, so capacity is part of the Cluster definition rather than a manual operation.

Direct premium support with a dedicated private Slack channel. Help installing and running Octelium Clusters at scale on cloud-based or on-prem Kubernetes, meeting compliance regulations and standards. Influence the roadmap for upcoming features.

Octelium Cluster components are dual licensed under a copyleft license and a commercial license. We offer an alternative commercial license for businesses that need to use Octelium without the copyleft obligations.