Products
The parts of XoT
XoT controls exactly who may communicate with what. Users do not get access to a whole network. They get an encrypted connection to the equipment that a policy allows.
XoT-Lock
The Lock sits in front of the equipment you want to protect. It can protect anything from a single device to several subnets. It only lets through traffic that a policy allows.
XoT-S1
The XoT-S1 is the hardware the Lock runs on. It is compact, mounts on a DIN rail and is made in Sweden.
XoT clients
A client opens an encrypted connection to a Lock. It is available for computers, for servers without a screen and built into every Lock.
XoT-WebAccess
With XoT-WebAccess, users reach equipment through a web browser. It suits situations where no software can be installed.
XMS
In the XMS you manage users, equipment and policies. You also see logs and the health of your Locks.
XoT-Bridge
The Bridge relays traffic when the client and the Lock cannot reach each other directly. It cannot read the traffic.
Principles
No access without a policy
XoT follows a zero-trust model. No user or device gets access just because it is on a particular network. Every connection must be explicitly allowed by a policy.
Deny all by default
No traffic reaches protected equipment without a policy. This applies even when the Lock and the client are connected.
Least privilege
A policy covers specific equipment, protocols and ports. Someone allowed SSH to a server does not automatically get RDP to the same server.
Checked every 30 seconds
The client and the Lock check each other every 30 seconds. If the client fails the check, the connection is closed.
Access that expires
The XMS issues access tickets that are valid for a set time. When a ticket expires, the connection is closed.
Both sides show certificates
The client and the Lock verify each other's certificates before the connection opens.
Common setups
How the parts work together
Protect equipment
A Lock sits in front of a machine or a network segment. Users reach the equipment with the XoT-Desktop Client.
Machine to machine
Two Locks open an encrypted connection between them. The equipment behind them can communicate without any software installed on it.
Remote access via a Bridge
An XoT-Bridge relays traffic between users outside the company and Locks inside. The Bridge sits in a DMZ or in the cloud.
A computer behind a Lock
A Lock sits between a computer and the network. The computer gets its address from the Lock and uses the XoT-Desktop Client as usual.
Access through a browser
XoT-WebAccess gives a temporary desktop in the browser. It suits contractors, auditors and people using their own devices.
Which parts do you need?
Tell us what you want to protect, and we will suggest the right parts.