Controls
Signed agents.
Every agent is code-signed, and the console manages the certificates. A Management Agent installs, updates and configures the other agents. The ARRTECH SIEM agent encrypts logs in transit and holds them when the server is unreachable.
Separate keys.
Each Cyberdroid AI Investigation agent signs in with its own key, stored hashed. You rotate or revoke one key without touching the others. Each key can be restricted to listed source addresses, and each agent sees only its approved tasks.
One vault.
The credential vault stores and reuses the credentials for each integration, from databases and mail to REST APIs and SSH. Each connection is tested before it is saved.
Scoped roles.
Each tenant has its own users, sources, policies, reports and alerts. Roles decide who reads each log source and uses each feature. Sign-in is local or through Active Directory and LDAP, with password policies you set.
Protected agents.
ARRTECH DLP agents are protected by one-time passwords and a master password. The Protected Process rule keeps a process running, even when a local or domain administrator tries to stop it.
Verify
Signed logs.
Every ARRTECH SIEM write is hashed, signed and chained to the previous file, and a qualified timestamp authority timestamps the files daily. Any source exports with its signatures, the certificate and a standalone verifier.
Audit log.
The console records every login, search and configuration change, and shows who is online now. You can review who did what without asking us.
Recorded requests.
Cyberdroid AI Investigation records every request as Task, Pending approval, Refused or Rate-limited. Each record carries an operation id and a reason, so you can trace each decision to its request.
Limits
Page scope.
This page describes our products as of Sep 24, 2026. It is not a certification, an audit report or a contract term. Ask us about anything it does not cover.
