Security analysts working at screens in an operations room
For organisations

TotalHeal for enterprises

Everything for business, plus zero-trust and privileged access, the SOC Center and the depth larger security teams need.

Available today

Everything in Business, plus:

9 features you can use today — on top of Business. Where a feature works only on some systems, it says so.

Access (5)

  • TotalHeal ZeroGate ZTNAPer-app grants, private apps through a gateway, device approval, Secure SSH and audit.
  • TotalHeal PrivilegeVault PAMVault, check-out with approvals, SSH, RDP and VNC brokering, recording and command capture; dual approval, rotation and database connectors.
  • Local admin password rotationWindowsLAPS-style rotation of the local administrator password.
  • Recovery-key escrowBitLocker and FileVault keys sealed per organisation (opt-in).
  • Directory integrationUser and group sync.

Security operations (4)

  • TotalHeal SOC CenterPosture, incidents, threat map and MITRE ATT&CK activity on one screen.
  • TotalHeal Video WallSOC views across many displays: layouts, profiles, schedules, displays paired by code and a kiosk client that reconnects on its own.
  • TotalHeal HuntSphereSaved and scheduled hunts.
  • Custom AI agentsYour own SOC agents, defined by signed manifests and run behind the same approval gate.
Coming

Not available yet — and never shown as included

ZeroGate depth PlannedJust-in-time access, micro-segmentation, posture rules, your own relays.
ThreatSandbox Partly availableThe desktop already submits suspicious files; the detonation host is not connected.
On-premises and air-gapped control plane Available on requestOne signed kit for your Linux server, offline licence and updates, sign-in with Active Directory / LDAP, SAML 2.0 or OpenID Connect, and a break-glass administrator.
TotalHeal Admin Console desktop app ComingThe console as a desktop app for cloud, on-premises and air-gapped installations — macOS first, Windows and Linux next. Not published yet.
MSSP provider console Partly availableProvider tenants and consent links; billing and white-label not built.
IndustrialGuard and the resilience family In developmentOT security, backup, immutable vaults, cyber recovery and disaster recovery: built and tested, arriving after release.