Deployment
Cloud, on-premise or hybrid — air-gap capable where SaaS is ruled out.
Every capability an identity security program needs, on one platform.
Access Management, Identity Governance and Privileged Access — eighteen capabilities sharing one identity fabric, one policy engine and one audit trail, instead of three disconnected products.
One adaptive front door for every application
Single sign-on, risk-based authentication and a personalised launchpad — so users get in fast, and only ever the way policy allows.
Single Sign-On
One sign-in across every application, via SAML 2.0 and OIDC.
Adaptive MFA
Risk-based multi-factor with configurable factors, policies and network zones.
Passwordless & FIDO2
WebAuthn passkeys and two-factor sign-in, with self-service password reset.
App Launchpad
A personalised portal listing every application a user is entitled to.
Biometric MFA
Go beyond passwords & OTPs with identity-bound security.
Zetect’s biometric MFA requires a fingerprint or facial scan to verify the user’s identity in real time. This ensures that even if a device or password is compromised, attackers cannot gain access without the unique biological traits of the authorized individual.
- Eliminates phishing, SIM-swap and social engineering attacks
- Removes dependency on unreliable SMS OTPs
- Provides a frictionless and fast login experience
Know who has access, and keep it justified
From the moment an identity is created to the moment it leaves, access is requested, reviewed, and retired automatically — with the evidence produced as a by-product.
Identity Directory
Aggregate and correlate users, groups and attributes from every connected source.
Lifecycle Management
Automated joiner, mover and leaver provisioning across every connected application.
Access Requests
Self-service catalog with configurable approval policies and an approval queue.
Access Certification
Scheduled review campaigns, including orphan-account and full-identity reviews.
Segregation of Duties
Toxic-combination rules evaluated before access is granted, not after.
Birthright & Policy-Based Access
Access granted and revoked automatically as attributes and group membership change.
No standing credentials left for anyone to steal
Credentials vaulted, privilege granted just-in-time, and every session brokered and recorded — without installing anything on the target itself.
Credential Vaulting
Privileged credentials vaulted and rotated automatically — no shared admin passwords.
Just-in-Time Access
Privilege granted against an asset for the moment it is needed, then revoked.
Brokered Sessions
Agentless RDP and SSH, brokered without installing anything on the target.
Session Recording & Monitoring
Full recording, live monitoring and one-click termination of any privileged session.
The core that ties all three together
The connective tissue underneath every module above — one audit trail, one mapping engine, and agentless connectivity to everything you already run.
Unified Audit Trail
Authentication, entitlement and privileged events correlated on one timeline.
Expressions & Transforms
A declarative engine for lookups, decisions and pipelines — no connector code.
Connectors & Agents
Agentless connectivity to apps and assets, with a connector build toolkit.
Reporting
Operational and compliance reporting drawn from the same single data model.
One audit trail across all three
Point tools leave seams, and attackers live in the seams between login, entitlement and privilege. Because all three disciplines run on one identity fabric, every authentication, access grant and keystroke lands on a single correlated timeline.
- One identity source — human, service and privileged accounts
- One policy engine governing login, request and session
- One audit trail, correlated across all three modules
- One console — no tab-hopping between products
- No connector sprawl syncing identities between tools
Designed for simplicity,
scalability, and compliance
Integrations
SAML 2.0, OIDC, SCIM and REST APIs into the systems you already run.
Connectivity
Agentless throughout, including brokered RDP and SSH — no target footprint.
Compliance
Evidence that maps to ISO 27001, SOC 2, PCI-DSS, HIPAA, SOX, GDPR and NIST 800-53.
Adoption
Start with one module and add the others later — no migration project in between.
See how Zetect can be tailored to your environment