Security, Compliance & Controlled Access

Privileged access

Relay’s PAM console manages credentials stored in the Portal credential vault. Relay does not store secrets itself. Operators check credentials out, and some checkouts need approval. Revealing a secret requires step-up authentication. Break-glass skips approval but still obeys the credential’s policy. Credentials can also run commands on an endpoint and rotate on a schedule.

Compliance and vulnerabilities

• Build compliance templates, assign them to endpoints, run scans and review results.
• Trigger remediation from failed checks, or record an exception.
• Review vulnerabilities by exploitability, set remediation policies and record risk acceptance.
• Vulnerability findings can feed patch deployments.

Certificates and drift

Relay discovers certificates on managed endpoints, renews them automatically or on demand, and can hold renewals behind a change approval. Fingerprint policies capture a baseline for each endpoint. Differences from the baseline become drift events with a severity. Informational drift can be accepted automatically, and a drift event can start a workflow.

Detection and response

• Exfiltration detection flags large outbound transfers, unknown destinations and tunneling. You tune thresholds per organization and maintain suppressions and a process allowlist.
• Ransomware detection combines six signal sources into a risk score per endpoint. A policy can isolate an endpoint automatically. You can also run simulations to test coverage.

Backup

Relay manages backup engines, storage targets, backup policies and third-party backup platforms. Replication rules support a 3-2-1 copy strategy. Restores and job history are visible from the backup dashboard.

Related Relay topics

• Endpoint & Service Operations
• Monitoring, Discovery & Automation