CyberArk vaults privileged credentials and monitors privileged sessions. //AIRGAPT composes with CyberArk, attaching a FIDO2-anchored, attributable consent record to each privileged session event.
"CyberArk vaults the credential and authorises the session. //AIRGAPT signs each privileged session event with the present operator's FIDO2 key and returns it to CyberArk, so privileged access is provably tied to a present human."
Zero new hardware. MSI deployment via your existing MDM. Works alongside CyberArk without replacing any existing workflow.