Privilege is not a right. It is a moment.
Fidwyn is a modern PAM platform that governs privileged access for human, machine and third-party identities from a single place. It grants every privilege at the moment of need, takes it back when the work is done, and proves everything in between. Self-hosted, with on-prem AI and zero egress.
Product features change.
Principles don't.
Every capability in Fidwyn serves one of three zeros. This is the assumption the whole platform is built on.
Zero Standing Privilege
There is no permanent admin account. A grant is born the moment it is needed, measured in minutes, and destroys itself when the work is done. No key is left to steal.
Zero Hidden Path
Attackers read the access graph, not the org chart. Augur AI maps every indirect path an identity takes toward privilege and closes it before you even notice.
Zero Blind Spot
Human, machine, AI agent; data center, cloud, OT — all in one risk engine. When no identity is unseen, no door is left undefended.
One platform for every identity that holds privilege.
Machine identities now outnumber humans 82 to 1, and AI agents are the fastest-growing class of all. Fidwyn governs them the same way it governs people: with context, a time limit and a record.
Employees, administrators and privileged operators.
Service accounts, automation and API identities.
The new, machine-speed workforce that writes and acts.
Vendors, consultants and external support.
When access is granted, the work isn't over;
that's when security begins.
Fidwyn turns pre-access verification, in-session control and post-access audit into a single security flow.
Not a catalog. One organism.
Every module is wired to the same risk engine that Augur AI feeds, and all of them are managed from one console. Pick the family your problem lives in.
Trust Core
Access & Session
Expanding Surfaces
Intelligence & Governance
Same night. Same attack. Two different endings.
An employee's password is stolen by phishing. What happens next depends on your architecture.
Privilege that lives only as long as the work.
Book a working session. Boot a fresh appliance in under a minute, request a just-in-time grant, and watch it expire on its own.