What's in This Release
What the current Anchor release includes, what it has been qualified on, and what it does not do yet. Plainly.
Anchor is in beta. This page says what the current release does, so you can judge the fit on facts.
Included
Section titled “Included”| Area | In this release |
|---|---|
| Managed systems | Linux, Windows local accounts, Windows Domain (Active Directory), PostgreSQL, and stored credentials |
| Password lifecycle | Verify, rotate and reconcile, on schedule or on request, with change windows and blackout dates |
| Onboarding | A Getting started checklist, Estate discovery scans, one at a time, in bulk from a reviewed CSV file, or Targets from the directory |
| Sessions | SSH terminal, SFTP files, Windows desktop and PostgreSQL SQL workspace in the browser; your own SSH client through Anchor’s gateway; audit, transcript or full recording |
| Access control | Global and per-Scope roles including Scope Admin, MFA with authenticator apps or security keys, directory sign-in over LDAPS or StartTLS, single sign-on with OpenID Connect, break-glass account, a personal locker |
| Evidence | A separate, chained and signed audit store, activity analytics, built-in notices and alert rules, CSV and JSON reports, read-only SIEM views, syslog forwarding over TLS, legal holds |
| Posture | Compass scoring for the estate and every account, SOC 2, NIST SP 800-53 and NIST CSF 2.0 control scoring with evidence export, Insights advisory review, Atlas access map |
| Operations | Health with diagnostics, add and remove hosts, signed upgrades, proven backups and restore drills, standby database copies, pooled Engines, time-boxed maintenance access |
| Installation | Signed installer, signed apt and dnf packages, offline bundle |
Qualified on
Section titled “Qualified on”- Standard (one host): a clean Ubuntu Server 24.04 host. This is the primary customer path.
- Distributed (one host per role): Ubuntu Server 24.04 containers, one per role, including upgrade, certificate replacement and recovery.
Qualification on virtual machines and other topologies is recorded per release; ask us about yours.
Not in this release
Section titled “Not in this release”- Approval steps before a session opens, and password check-out. Control who may connect with roles on Scopes instead.
- SAML sign-in and SCIM provisioning. Use OpenID Connect single sign-on or your directory instead.
- Managing MySQL, SQL Server, network devices or web applications. Keep their credentials safe as stored credentials.
- Port forwarding, command execution or jump-host use at the SSH gateway. It serves interactive terminals and file transfer.
- Database switchover and automatic failover. A standby copy streams every change; a lost primary is recovered from a proven backup.
Not claimed
Section titled “Not claimed”Anchor is designed to support SOC 2, FedRAMP and NIST control environments. Implemented controls are not a certification or authorization; only an external assessment provides that.