Free PAM & Zero Trust Security Tools

Visual multi-host SSH config generator with bastion chains, wildcard patterns, and best-practice defaults. Download ready-to-use config.

Like Mozilla SSL Config but for sshd_config. Select OS, version, and security profile. Get a production-ready hardened config with explanations.

Paste SSH public keys and get a full audit: algorithm strength, bit length, duplicates, missing comments, and rotation recommendations.

Create legal warning banners for SSH login. Generate /etc/issue, /etc/motd, and sshd_config Banner content with compliance-ready templates for SOC 2, HIPAA, and PCI DSS.

Configure NLA, encryption levels, session timeouts, and GPO settings for secure Remote Desktop access. Export as PowerShell, registry commands, or documentation.

Create enterprise password policies with complexity requirements, rotation schedules, and compliance mappings. Export as policy documents or PAM configuration.

Plan rotation schedules for SSH keys, database passwords, API tokens, and service account credentials. Get a prioritized calendar with compliance gap analysis.

Interactive checklist to discover privileged accounts across Linux, Windows, cloud, databases, and applications. Get a risk-scored inventory with an onboarding plan.

Define roles, permissions, and resource access rules. Export role-based access control policies as JSON, YAML, or formatted policy documents for your access review.

Build just-in-time access policies with time windows, approval requirements, auto-revocation, and break-glass overrides. Export as JSON or YAML.

Generate idempotent Linux user setup scripts with SSH keys, sudo policies, group membership, and rollback scripts.

Define users, resources, and access mappings. Get automated findings and export audit-ready quarterly review reports.

Build least-privilege ClusterRoles, Roles, and RoleBindings with presets for common patterns. Export production-ready YAML for kubectl apply.

Catalog non-human and machine identities with risk scoring by privilege level, credential age, and MFA status. Get recommendations for securing service accounts.

Score your organization across identity, access governance, session management, credential vaulting, and compliance. Get a prioritized roadmap to improve PAM maturity.

Cross-reference access control requirements across SOC 2, HIPAA, PCI-DSS, ISO 27001, and NIST 800-53. Track implementation and export.

Evaluate your organization's Zero Trust readiness across identity, network, device, and data pillars. Get a scored report with actionable next steps.

Evaluate your organization's readiness for multi-factor authentication. Get recommendations for MFA methods, rollout strategy, and user communication plans.

Define recording rules per protocol — SSH keystrokes, RDP video, database queries, clipboard activity. Export as a JSON policy document.

Select a security scenario (compromised key, unauthorized access, privilege escalation) and get a step-by-step response playbook.

Complete production guide to centralize SSH authentication with LDAP using SSSD, PAM, and public key lookup. Covers OpenLDAP and Active Directory on Ubuntu and RHEL.

Generate comprehensive PowerShell scripts to audit AD hardening — password policies, Kerberos security, privileged access, stale objects, GPO settings, LDAP security, and DC health. CIS & NIST aligned.