About defguard
Last updated
Was this helpful?
Last updated
Was this helpful?
Defguard is a comprehensive Remote Access Management solution incorporating in one solution:
Our primary focus at defguard is on prioritizing security. Then, we aim to make this challenging topic both useful and as easy to navigate as possible.
Having said that, this security platform is for building secure and privacy-aware organizations, as we put great effort not only on functionality but first and foremost on secure code, architecture and testing (application and security).
The main architecture concept is that all critical data should be in the internal (Intranet) network and not exposed in the public Internet (contrary to typical and common cloud approach) and only services that need to be exposed to the Internet - should be exposed in a controled (DMZ) network segments:
This approach is vastly different from most (if not all) VPN/IdP solutions, which are a simple or monolithic applications focus on functionalities and most of the time is publicly available in the Internet for any attacker to exploit.
Of course you can deploy defguard in a typical scenario (all services on one server and even all publicly available) - but that should be for you to decide!
Incorporating IDM, ALM, VPN has also other advantages:
Your organization may use just one account (login) for access control to all your applications as well as VPN.
It simplifies deployment, maintenance, audits.
True Zero-Trust ,
Identity Management with ,
Account Lifecycle management with .
Defguard is a true Zero-Trust , as each connection requires MFA (and not only when logging in into the client application like other solutions):
Internal IdP with 2FA/MFA enables us to provide - and not like most applications just 2FA when opening the app (and not during the connection process). Even if you use (Google/Microsoft/Custom - which defguard supports), we still use our internal IdP for 2FA/MFA.
More about .
Checked by professional security researchers (see )
