| Platform |
✅ Unified & Simple Platform
Integrated MFA + PAM + Remote Access in one easy-to-manage platform.
No complex integrations, multiple agents, or modules.
|
⚠️ Complexity & Resource Intensity
Complex setup, lengthy deployment, significant admin overhead.
Requires dedicated security teams capable of managing complexity.
|
| Deployment |
✅ Fast & Simple Deployment
Deploys in hours with minimal configuration. No dedicated security team needed.
Quick time-to-value with minimal operational burden.
|
❌ Complexity & Resource Intensity
Complex deployment requiring lengthy professional services engagements.
Months-long rollouts with significant admin overhead.
|
| Pricing |
✅ Low, Transparent, Per-User Pricing
Simple per-user pricing — no add-ons, no hidden fees, no surprise costs.
All-inclusive licensing that scales predictably with your team size.
|
❌ High, Infrastructure-Heavy, Per-Device Pricing
Requires spinning up 6–8 VMs just to run the platform, driving significant infrastructure costs.
Extra expenses in professional services, add-on modules, and ongoing maintenance.
|
| Total Cost (TCO) |
✅ Significant Cost Savings, More Accessible
Cost-efficient licensing structure — ideal for SMEs & mid-market with minimal infrastructure
overhead.
No costly add-ons or hidden fees.
|
❌ Very High Cost, Premium Pricing
Premium pricing model with large enterprise focus.
Excessive costs for organizations with limited security budgets.
|
| NIS2 Readiness |
✅ NIS2-Ready Out of the Box
Covers NIS2 requirements in a single platform that deploys fast, simple to achieve.
|
❌ Non-Compliant with EU Sovereignty Direction
Having major headquarters in the US, increasing regulatory risk for customers.
|
| Data Sovereignty |
✅ 100% EU Owned & Operated, No US CLOUD Act
Fully European company — not subject to the US CLOUD Act. No foreign government can compel access
to your data or demand secret backdoors.
Critical for NIS2 compliance and upcoming EU digital sovereignty regulations.
|
❌ US CLOUD Act Exposure
Having major headquarters in the US, fully subject to the US CLOUD Act. US authorities can compel
access to any customer data stored anywhere in the world.
Forced data disclosure, secret backdoors, and gag orders are legally mandated.
Upcoming EU digital
sovereignty regulations could ban the use of non-EU vendors for high-risk organizations.
|
| Architecture |
✅ Isolation by Design, resilient to Zero-Day Threats
Architecture inherently protects against zero-day threats through isolation and air-gap design.
Reduce attack surfaces, no lateral movements, no reliance on signatures or known threat databases —
unknown attacks are neutralised by default.
|
⚠️ Limited, Signature-Based, Vulnerable to Zero-Day Threats
Protection relies heavily on signature-based detection and known threat patterns.
Novel zero-day attacks can bypass defences until signatures are updated.
|
| AI & Governance Model |
✅ Pre-Execution (Pre-Emptive)
Pre-emptive governance reduces risk exposure and eliminates reactive firefighting.
Real-time AI analyzes user intent and behavior for threat detection before actions are executed.
|
⚠️ Post-Execution (Reactive)
Reactive model means damage may already be done before intervention.
Security controls primarily detect and respond after actions have already occurred.
|
| Web Access & RBI |
✅ VITRO Technology with Native DOM-Streaming RBI & WAF
Innovative DOM-streaming Remote Browser Isolation (RBI) with visually lossless, lag-free sessions.
Zero-trust, bi-directional protection with built-in WAF functionality.
|
⚠️ Limited Isolation, Basic Web Access
No true RBI/WAF capabilities for comprehensive protection.
Vulnerable to sophisticated web-based threats.
|
| MFA Integration |
✅ Truly Passwordless and Built-in MFA
Built from the ground-up on passwordless authentication (biometric phone MFA, passkeys).
Users never handle passwords directly — credentials are transparently managed.
|
⚠️ Vault-centric, Traditional Credential Checkout
Traditional password-based approach with complex authentication flows.
Potential productivity loss and user resistance.
|
| Endpoint Agents |
✅ Agentless
Completely agentless — no endpoint agents required. Access via standard HTML5 browser.
Easy rollout and support with zero client installation.
|
⚠️ Often Required (Agents/Add-Ons)
Often requires installation of endpoint applications or add-ons.
Less adaptable to modern cloud environments.
|