Lease the server.Not the attack surface.
Every dedicated server, VM and private cloud you lease arrives with RDP or SSH answering the internet. SSHepherd® closes those ports while your tenants keep working, and gives you a secure-access add-on to sell with every lease.
Their server.Your incident.
Tenants manage their own servers, but an exposed port on any of them is a problem on your network.
A leased server with RDP or SSH open starts receiving login attempts from the internet as soon as it comes online.
When a tenant's server is compromised, the abuse reports, the blacklisted IP ranges and the support tickets land with you.
Tenants run their own servers. You can't make them harden or patch, but you carry the consequences on your network.
Safer servers.A new line on every lease.
SSH, RDP and database ports can be switched off on every leased server. Tenants still connect, with the SSH and RDP clients they already use.
Offer secure access as a line item on the server you already lease, priced per protected server. More revenue from the same rack.
SSH and RDP sessions are recorded and can be ended live: evidence for your tenants' audits, and for your own staff's access to tenant servers.
No network redesign. Physical and virtual, on-premise and cloud servers all use the same model, on Windows and Linux.
Every lease comes with a front door.SSHepherd leaves it with none.
A server that doesn't answer can't be guessed at, exploited or turned against your network. Your tenants still get in, through SSHepherd, with the tools they already use.
Sell it to tenants.Run it on your own estate.
A secure-access add-on
- Close RDP, SSH and database ports on the servers they lease.
- Tenants keep their SSH and RDP clients, through the SSHepherd Control App.
- Session recordings they can show their own auditors.
- Priced per protected server, alongside the lease.
Your management estate, dark
- Close the admin ports on your own management and infrastructure servers.
- Every staff session to a server is recorded and can be ended live.
- An answer ready when a tenant asks who from your team accessed their server.
- One model across physical, virtual, on-premise and cloud.
Pilot it.Then ship it with every lease.
Protect a handful of servers, yours or a willing tenant's. Scan them before and after.
Decide how secure access appears on your price list: an add-on, or part of a managed tier.
Add the SSHepherd agent to your server build, so new leases can ship with the ports already closed.
Your engineers run it day to day, trained by Auris, with our engineers in Malaysia behind them.
What hosting providers ask.
Does it work on virtual machines as well as bare metal?
Yes. SSHepherd protects on-premise, cloud, physical and virtual servers with the same model, on Windows Server 2016 to 2022 and the major Linux distributions.
Do tenants need new tools?
No. The SSHepherd Control App launches the native SSH and RDP clients, so tenants keep their usual workflow. What changes is that the server no longer listens for inbound connections.
Can tenants still host public websites?
Yes. Ports that are meant to be public, like 80 and 443, keep serving. SSHepherd closes the administrative and management ports that were never meant to face the internet.
Where does the SSHepherd C3 server run?
You host it on Kubernetes, on-premise or in the cloud. How it is arranged across your tenants, one per customer or shared, is decided with our engineers during scoping.
Can we build it into provisioning?
Yes. The agent installs on Windows and Linux hosts and registers with your C3 server, so it can be part of your standard server build.
How is it priced?
Per protected server, billed annually or quarterly, through authorised partners. Margins are shared once we have talked about your estate and customers.
More on SSHepherd: how it works · Windows RDP · Linux SSH · the partner programme.
Add it toevery lease.
Tell us roughly how many servers you lease, and whether they are physical, virtual or private cloud. We will set up a partner call and reply within one business day.