PLATFORM

One Platform. Total Visibility.

Cloud dashboard, API gateway, and Windows agent working in concert to secure every endpoint.

Architecture

Cloud Dashboard React 19 + TypeScript
API Gateway Go + Fiber v2 + PostgreSQL
Windows Agent C# .NET 8 Service
Endpoint Device Windows 10 / 11

Built with the Right Tools

Every layer of the stack chosen for performance, security, and reliability.

Go Backend

Performance-First API

Fiber v2 framework with GORM and PostgreSQL. Sub-millisecond routing, rate limiting, and JWT authentication built for high-throughput agent communication.

< 5ms API response time
19 handler modules
4-tier rate limiting

React Dashboard

Real-Time Visibility

React 19 with TypeScript, Zustand state management, and React Query. 18 pages covering every security dimension from elevation requests to threat detection.

18 management pages
Real-time data sync
Dark/light themes

C# Windows Agent

Native Endpoint Power

.NET 8 background service with WPF tray application. Named pipe IPC, anti-tamper protection, and encrypted local policy caching.

Silent installation
Auto-recovery
Named pipe IPC

Integrations

Works with the tools you already use.

Wazuh SIEM

Feed endpoint events into your SIEM for centralized correlation and alerting.

Microsoft Graph

Deep M365 integration for user, device, and compliance insights.

Active Directory

Sync users, groups, and OUs for policy targeting and role assignment.

Runs Silently. Reports Everything.

The CtrlLayer agent is two components working in harmony.

BACKGROUND SERVICE

CoreService

The invisible backbone. Runs as a Windows service with SYSTEM privileges. Handles policy enforcement, telemetry collection, USB monitoring, app discovery, and secure communication with the cloud API.

Worker PolicyCache GrantValidator UsbMonitor AppDiscovery TelemetryEngine AntiTamper AesHelper
USER INTERFACE

TrayApp

The user-facing companion. A lightweight WPF application in the system tray that enables elevation requests, tech session participation, and USB access requests. Communicates with CoreService via named pipes.

Elevation Tab Tech Session Tab USB Control Tab Pipe Client

Ready to Take Control?

Request your invite and see what zero-trust elevation actually looks like.

Request Invite