Global Policies
AIR has a system of cascading policy definitions. Global policies are created as defaults to define acquisition profiles, evidence repositories, CPU usage, and more.
AIR is an enterprise solution and has enterprise-grade features to facilitate its management in line with your corporate policies and security requirements.
AIR has a system of cascading policy definitions. Global policies are created as defaults to define acquisition profiles, evidence repositories, CPU usage, and more.
Policies at the organisation, group or individual endpoint can be created where it is necessary to override the global policy.
Integration with Active Directory automatically creates and maintains your organisational structure within AIR.
Access to the AIR management console can be securely controlled using Single Sign On and 2 Factor Authentication.
AIR’s native Organisations feature allows for additional business structure definition and access management making AIR a multi-tenant for managed service providers.
AIR includes a highly granular roles and users definition system, with more than 80 different variables, to tightly control access permissions throughout your security team.
The headline and subheader tells us what you're offering, and the form header closes the deal. Over here you can explain why your offer is so great it's worth filling out a form for.
AIR can be delivered as an On Premise (inc. offline), Private Cloud or SaaS based solution. Our Docker architecture makes deployment a breeze.
AIR’s endpoint agent is passive making it extremely lightweight on resource usage at just 0.01% CPU and 14MB RAM.
Configuration of backup locations and scheduling of auto-backups can all be configured in the AIR management console.
Extensive, tamper-proof audit logs are kept by the AIR platform locally and can also be integrated with your Syslog servers.
AIR’s endpoint isolation feature allows you to remotely isolate a machine from the network, in seconds, while still performing actions from the AIR management console (acquisition, triage, timeline etc).
Endpoints can be remotely rebooted or shut down from the AIR management console.