One sign-in. Only the access you need. Every event in plain sight.
Access management, a protected network and security monitoring. Your data never leaves the country.
- Works on top of Active Directory
- UzCloud cloud or on-premises
- Support in Uzbek and Russian
- Active Directory accountFound · Finance group IAM
- PasswordCorrect IAM
- Second factorCode from the app IAM
- DeviceWindows 11, antivirus active ZTNA
Available resources
- 1C:Accounting
- File server
- Database server
- Branch network
Illustration with sample data.
Three Gate modules
Connect them together or one at a time.
System access
- 1C:Enterprise
- CRM
- Portal
- UzCloud Flow
Illustration with sample data.
Device
Laptop · Nigora Karimova
- Windows 11 23H2
- Antivirus active
- Updates installed
- Disk encrypted
- 1C:Accounting10.0.4.12 AccessHidden
- File serverfiles.corp AccessHidden
- CRMcrm.corp AccessHidden
- Database server10.0.9.3 AccessHidden
- Branch network, Samarkand10.20.0.0/16 AccessHidden
The Finance group sees 2 of 5 resources. The rest are hidden from the network.
Illustration with sample data.
Alerts
- 11:40:02 SSH password guessing, 46 attemptssrv-1c-01 · T1110 IP blocked
- 11:12:45 /etc/ssh/sshd_config changedsrv-files-02 · FIM Administrator notified
- 10:58:10 Suspicious PowerShell processws-fin-114 · T1059 Process ended
- 10:31:22 OpenSSH vulnerability foundsrv-mail-01 · CVE In report
Vulnerabilities
- CVE-2024-6387OpenSSH 9.68.112 hosts
- CVE-2024-38063Windows TCP/IP9.84 hosts
- CVE-2023-4863libwebp8.87 hosts
Illustration with sample data.
The modules work together
An Active Directory account opens only what is needed, and every event goes into the log.
| Time | Module | Source | Event | Result |
|---|---|---|---|---|
| 09:02:11 | IAM | N. Karimova | Sign-in: password and second factor | Succeeded |
| 09:02:14 | ZTNA | N. Karimova’s laptop | Device check: Windows 11, antivirus active | Passed |
| 09:02:15 | ZTNA | N. Karimova | Access to 1C:Accounting through the Finance group in AD | Granted |
| 11:40:02 | SIEM | srv-1c-01 | 46 password-guessing attempts from 185.22.14.7 | IP blocked |
| 17:30:45 | IAM | Administrator | J. Turaev’s account disabled | Access closed in 5 systems |
We run it, or your team does
The platform runs in the UzCloud cloud or in your data centre. You choose the mode.
We run it
Updates, monitoring, backups, rule tuning and response to critical events. You get a dashboard, reports and a contract with a set response time.
Your team runs it
We deploy and configure the platform, train your specialists and stay on support: advice, updates, incident escalation. A good fit for banks.
Why not deploy it yourselves
Integration
Linking Active Directory, sign-in, network and monitoring into one system takes weeks. We do it on every project.
Operations
Updates, rule tuning, backups and alert triage need a security engineer. We take this work on.
Responsibility
We are contractually responsible for the platform. If something breaks, we fix it.
Prices known upfront
- UzCloud IAM UZS 35,900 per user per month, excl. VAT Learn more
- UzCloud ZTNA UZS 35,900 per user per month, excl. VAT Learn more
- UzCloud SIEM UZS 47,900 per endpoint per month, excl. VAT Learn more
We will price a module bundle and the Corporate plan with a dedicated manager for your organisation.
Questions
This is open source. How reliable is it?
Gate is built on mature open platforms: Keycloak, NetBird and Wazuh. We take care of configuration, integration, updates and support. You get a managed service and pay no per-user licence fees.
Where is the data stored?
In our Tier III data centres in Uzbekistan or on your organisation’s own servers. Accounts, logs and policies never leave the country.
Do we need to change Active Directory or the network?
No. IAM works on top of Active Directory, and staff sign in with their current accounts. ZTNA works on top of your VLANs, firewalls and routers.
Can we connect just one module?
Yes. IAM, ZTNA and SIEM are connected separately. If you need the others later, we add them and link them to the ones already running.
Is Gate suitable for banks?
Yes. For banks we deploy the platform and hand its operation over to your team, while we stay on support.
How do we start?
We start with an audit: which systems, accounts and servers need protecting. Then we design the policies, deploy the modules and train your administrators.
See Gate on your own infrastructure
We will go through your systems and accounts and calculate the cost. A solutions architect will help.