Tanflow IAM Suite & PAM: identity and privileged access security for the enterprise. Get a Demo →

Tanflow PAM · Capability

Universal Protocol Access

One gateway to servers, desktops, databases, Kubernetes and internal web apps, reached from the browser with nothing installed on the endpoint.

Overview

The protocols your teams use

A privileged access platform is only useful if it reaches everything. Tanflow PAM brokers remote desktops, terminals, Kubernetes, the main database engines (through both CLI and native GUI clients) and internal web applications, all through one gateway with no agents, rendered in the browser.

Desktop and terminal

SSH, RDP, VNC, Telnet and Kubernetes access, brokered through the gateway and recorded from start to finish.

Database CLI

Secure command-line access to PostgreSQL, MySQL, Microsoft SQL Server, MongoDB, Redis, Oracle and MariaDB.

Database GUI clients

Native tools such as DBeaver, pgAdmin, DataGrip, MySQL Workbench, Azure Data Studio, Oracle SQL Developer, MongoDB Compass and SAP GUI open through the managed gateway.

Web application access

Browser-based access to internal web apps through a managed container, without exposing them directly on the network.

Connection groups

Arrange targets into groups so access, policy and reporting stay manageable across a large estate.

No agents

Nothing is installed on targets or endpoints. Adding a new server is a configuration entry.

Why it matters

What you can show an auditor

  • One recorded access path for the whole estate
  • DBAs keep their usual tools and every action is still governed
  • New targets are added in minutes
  • The same policy and audit across IT, OT and database access

Part of Tanflow PAM

This is built into Tanflow PAM, the privileged access platform that needs no agents and deploys on your infrastructure in 2-4 weeks.

Explore the full platform →

FAQ

Common questions

Do users have to give up their preferred database tools?

No. Tanflow brokers native GUI clients such as DBeaver, pgAdmin and DataGrip through the gateway, so teams keep the tools they know while access stays vaulted, controlled and recorded.

What has to be installed on target servers?

Nothing. The gateway connects using each target's native protocol, so there are no agents to deploy or maintain on the servers.

See Universal Protocol Access in action

A short demo built around your environment and your compliance requirements.