Endpoint management
Everyday admin tasks, made secure
Disk encryption, USB drive control, scripts and software deployments: four tools in one, with a common rule: nothing runs without a signature.
The problem
A stolen unencrypted laptop, an unknown USB stick, a script copied from a forum: everyday incidents often come from simple tasks that are poorly controlled.
What the module does
K-Crypt
BitLocker and FileVault status, remote activation and encrypted escrow of recovery keys, with dual approval.
K-USB
Blocking of removable storage, allow list by serial number, read-only mode and a log.
K-Script
A library of scripts signed by your organisation; unsigned scripts are refused by the agent.
K-Deploy
Deployment of your own installers, with a mandatory fingerprint.
How it works
Policy
You define the rules by device group.
Signature
Scripts, packages and policies are signed before being sent.
Trace
Every sensitive access, such as reading a recovery key, is logged.
What you should know
- K-USB and K-Script are partly built; K-Crypt and K-Deploy are in development.
- Remote access (K-Remote) is part of a separate option, planned for phase 5.
Frequently asked questions
Questions about this module
Who can read a BitLocker recovery key?
Only authorised roles, with optional dual approval; every read is recorded in the audit log.
Want to try this module?
The pilot programme gives you access to modules as they are delivered, free of charge and with no commitment.