Security
We believe in transparency.
Security is a first-class citizen with everything SysWard does — from the open-source agent you can read line by line, to the infrastructure that runs it. Have questions? [email protected]
The agent
Open source
The on-host agent is fully open source. Don't trust random binaries running as root — inspect every line before you deploy it, and build it internally if your security policy requires it. View source on GitHub →
SSL/TLS everywhere
All communication between the agent and SysWard is encrypted over SSL/TLS. No plaintext traffic, ever.
Air-gapped network support
Fully compatible with air-gapped networks via HTTP and HTTPS proxy support. The self-hosted appliance extends this to entirely on-premises deployments.
Least-privilege via sudoers
Lock down the agent with a sudoers configuration so it only holds the privileges it actually needs — nothing more.
Your account
Two-factor authentication
Full 2FA support in the web interface. Enable it to require a second factor on every login, protecting accounts even if a password is compromised.
bcrypt password hashing
All passwords are hashed with bcrypt. No plaintext or reversibly-encrypted passwords are ever stored.
Encrypted support tickets
Need to share sensitive details with our team? We support GPG encryption for support tickets — just let us know when you open one.
Your data
VPC network isolation
All backend systems run inside a fully isolated AWS VPC. Nothing is reachable from the public internet unless it explicitly needs to be.
IAM & bastion access
AWS IAM controls all access to infrastructure resources. Network access to systems is gated through bastion hosts and VPN — no direct SSH exposure.
Full audit logging
Every patch run, scan, and administrative action is logged with a timestamp and actor. Export the evidence for SOC 2, ISO 27001, or PCI reviews on demand.
We use our own product
SysWard's own servers are managed and patched by SysWard. We believe in what we make — our infrastructure is the first line of dogfooding.
Ready to patch with confidence?
Free for 2 servers · $1/agent/month after · no credit card