Second factor
a one-time code on every login
10+ vendors
privileges in each vendor's own attributes
RADIUS + TACACS+
plus SSH and sudo on Linux
On-premises
your accounts never leave your network
One login for every switch, router, firewall and Linux server — with a second factor, clear policies and a complete audit trail.
No more shared admin passwords on every device — one place for who may log in where, and with which rights.
Password plus a one-time code from any authenticator app — on switches, firewalls, Linux servers and the portal itself. Recovery codes for emergencies.
Cisco, Palo Alto, Fortinet, Juniper, Arista, HPE Aruba, Check Point, F5, Huawei and MikroTik get their privileges in their own RADIUS attributes.
The Aegis agent brings the same accounts to SSH and sudo: local users and sudo rights follow your policies, with the one-time code on every login.
Groups of people, groups of devices and a policy linking them with a privilege level — the highest one wins.
With TACACS+, decide which commands a group may run — and see every denied command in the log.
Every login, rejection, challenge and command, with user, device and source address — searchable, filterable and exportable as CSV.
Repeated failures lock an account for a while; unknown RADIUS clients are dropped and recorded.
One-time codes depend on the clock: Aegis corrects its time over HTTPS when NTP isn't available.
Logins, rejections and denied commands over the last 24 hours, accounts without a second factor and when each device last asked.
A policy joins a group of people with a group of devices and a privilege level, optionally with sudo on Linux and a command list for TACACS+.
The audit log shows each authentication and authorisation with its result and reason — exactly what auditors ask for.
See at once who belongs to which group, who has set up their authenticator and who hasn't logged in for a while.
Aegis runs on your own Rocky Linux or Red Hat Enterprise Linux 9 server with PostgreSQL — one package that sets up the database, HTTPS and its services.
Only necessary cookies (form security, your language); visits are counted without cookies, with shortened IP addresses. With your permission we also use Google Ads to measure whether our ads lead to enquiries. Google then sets cookies and receives data about your visit. You can change your choice at any time under Privacy settings. Google Ads measurement is on. Privacy policy