
One way in
People sign in once, here, before they reach any app.
The access, sign-in, security and build role.


People sign in once, here, before they reach any app.

Changes to your fleet go through Gateway, which checks them against your rules and keeps a record.

App updates are built and scanned for known flaws here before they reach your machines.
Every fleet is different. We size each machine with you and help you source it from any vendor.
| Role | Access, sign-in, change checks and update builds |
|---|---|
| Runs on | A machine you own, or one we help you choose and source |
| Needs | A dedicated machine that holds the keys and the rules |
| Works with | Sentinel, Compute and Workshop |
| Managed by | Onyx, on the same screen as the rest of your fleet |
| Software | Onyx, set up in this role on your machine |
|---|---|
| Hardware | Yours. We help you choose and source it from any vendor, and you buy direct. |
| Managed service | Optional add-on: we watch and look after the machine for you |
So one machine holds the keys and the rules, and the machines that run your apps don't.
Every app image before it runs. On our own fleet that is 100% of the images running today.
