TotalHealDatasheet · 27 October 2026
TotalHealPrivilegeVault
Privileged Access Management (PAM)
Vault admin passwords, broker sessions without revealing them, record everything and rotate afterwards.
- Cloud (SaaS)
- Hybrid
- On-premises
- Air-gapped
The challenge
Shared administrator passwords for servers, Windows machines and databases are known to too many people, never change and leave no record of what was done with them. One leaked admin password is often the whole breach.
The answer
A per-organisation encrypted vault, check-out with human approval, SSH/RDP/VNC sessions brokered without showing the password, recordings and automatic rotation.
- Status
- Available
- Deploys as
- Cloud (SaaS) · Hybrid · On-premises · Air-gapped
- Runs on
- SSH; RDP / VNC; Rotation
- Priced per
- Privileged user per year
- Trial
- 30 days
- Licence
- Sold on its own; one TotalHeal console
Supported platforms
- Linux / UnixSSH
- WindowsRDP
- VNC servers
- PostgreSQL
- MySQL
How it works
- RequestA user asks for an account with a reason and a time box.
- Approve0, 1 or 2 distinct human approvers; never the requester.
- ConnectThe session opens with the credential injected and the host key pinned.
- RecordScreens and SSH commands are recorded; risky commands are blocked or alerted.
- RotateAt check-in the password or key is rotated, verified and restored on failure.
Reference architecture
Key capabilities
- Encrypted credential vaultAES-256-GCM with a per-organisation key; each secret version is bound to its organisation, account and version. OS passwords, SSH keys, database logins, API and cloud keys, kubeconfig. Lists never return secrets.
- Check-out with dual controlA reason, a time box and 0, 1 or 2 distinct human approvers — the requester can never approve. Exclusive check-out and reveal-once by policy.
- Sessions without the passwordSSH with the credential injected and the host key pinned; RDP and VNC through a broker with drive, printing and file transfer off.
- Recording and playbackSSH and RDP/VNC recordings sealed with SHA-256 at close, registered as evidence with chain of custody, played in the browser.
- Command capture and filteringEvery SSH command recorded and searchable; deny/allow lists that block or alert; risky commands raise SOC alerts mapped to ATT&CK.
- Live monitoringWatch a running session and terminate it with a reason; idle timeout and automatic end at the time box, check-in or revoke.
- Automatic rotationAfter check-in and on a schedule: Linux passwords and SSH keys, Windows local accounts on corporate devices, and PostgreSQL and MySQL logins with verify and restore on failure.
- Humans onlyAI agents and machine identities can never request, approve, reveal, rotate or open a session.
- Tamper-evident auditEvery PAM action in the hash-chained audit with a verified export; risky-command alerts can be forwarded to your SIEM.
In the console
Deployment options
Cloud (SaaS)AvailablePublic targets must be in your allowed networks.
HybridPartialThrough a Secure Access connector node on your network (a binary today); a dedicated on-site gateway is on the roadmap.
On-premisesAvailableOn-premises or fully offline, delivered with our team from one kit.
Air-gappedAvailableOn-premises or fully offline, delivered with our team from one kit.
System requirements
Protected platforms
- Linux / UnixSSH
- WindowsRDP
- VNC servers
- PostgreSQL
- MySQL
On-premises server
- Operating system
- RHEL, Rocky Linux or AlmaLinux 8 / 9; Ubuntu 20.04, 22.04 or 24.04; Debian 11 / 12
- Processor
- 4 vCPU (tested configuration)
- Memory
- 8 GB recommended (6 GB minimum)
- Disk
- 10 GB free for software, releases and backups, plus data
- Sign-in
- Active Directory / LDAP, SAML 2.0 or OpenID Connect
- Software
- Nothing to pre-install: no container runtime, database, web server or Java
Network and access
- A modern browser
- Network reachability from the broker, or a Secure Access connector
- TotalHeal server agent on Linux targets and desktop agent on Windows targets for rotation
- A database login that can change its own password for database rotation
Alerts and tickets to
- Splunk
- Microsoft Sentinel
- Elastic
- Syslog / CEF
- Jira
- ServiceNow
- Slack
- Microsoft Teams
Technical specifications
| Features | Included | ||
|---|---|---|---|
| Encrypted credential vault | Included | ||
| Check-out with dual control | Included | ||
| Sessions without the password | Included | ||
| Recording and playback | Included | ||
| Command capture and filtering | Included | ||
| Live monitoring | Included | ||
| Automatic rotation | Included | ||
| Humans only | Included | ||
| Tamper-evident audit | Included | ||
| Availability by tier | Essential | Professional | Elite |
| Encrypted credential vault (AES-256-GCM, per-organisation key) for OS, SSH and database accounts | Included | Included | Included |
| Check-out with dual control: reason, time box, up to two approvers (never the requester), reveal once, check-in | Included | Included | Included |
| Automatic rotation after check-in and on a schedule; tamper-evident audit | Included | Included | Included |
| Sessions without the password: SSH with the credential injected, RDP and VNC through the broker, command filtering | — | Included | Included |
| Live monitoring: watch a running session and terminate it | — | Included | Included |
| Recording playback sealed with SHA-256 and verified; command search across sessions | — | — | Included |
| List price per privileged user per year | US$240 · ₹22,840 | US$420 · ₹39,970 | US$660 · ₹62,810 |
| Platforms and coverage | |||
| SSH | Linux/Unix servers and any SSH host | ||
| RDP / VNC | Windows / any VNC server | ||
| Rotation | Linux (server agent), Windows local accounts (desktop agent), PostgreSQL, MySQL | ||
| Console | Modern browser | ||
| Deployment options | |||
| SaaS (India region) with cloud broker | AvailablePublic targets must be in your allowed networks. | ||
| Hybrid (private targets) | PartialThrough a Secure Access connector node on your network (a binary today); a dedicated on-site gateway is on the roadmap. | ||
| On-premises / air-gapped | AvailableOn-premises or fully offline, delivered with our team from one kit. | ||
| Licensing | |||
| Priced per | Privileged user per year | ||
| Counted | Users allowed to check out credentials or open sessions | ||
| Trial | 30 days | ||
| Editions | Organisations that have PrivilegeVault today through Enterprise keep every tier. | ||
| Government profile | Government is a profile, not a separate tier or price list: the Elite tier with Government defaults switched on — data residency in India, four-eyes approval of policy changes, a distinct approver for every approval-level action, retention of at least 180 days, and the CERT-In and DPDP reporting clocks. | ||
| Procurement dossier | Compliance matrix, bill of materials, architecture and hardening, SLA and OEM authorisation letter, on request | ||
| On-premises server | |||
| Operating system | RHEL, Rocky Linux or AlmaLinux 8 / 9; Ubuntu 20.04, 22.04 or 24.04; Debian 11 / 12 | ||
| Processor | 4 vCPU (tested configuration) | ||
| Memory | 8 GB recommended (6 GB minimum) | ||
| Disk | 10 GB free for software, releases and backups, plus data | ||
| Sign-in | Active Directory / LDAP, SAML 2.0 or OpenID Connect | ||
| Software | Nothing to pre-install: no container runtime, database, web server or Java | ||
| Requirements | |||
| Requirement 1 | A modern browser | ||
| Requirement 2 | Network reachability from the broker, or a Secure Access connector | ||
| Requirement 3 | TotalHeal server agent on Linux targets and desktop agent on Windows targets for rotation | ||
| Requirement 4 | A database login that can change its own password for database rotation | ||