Four lines covering the fleet: patching and monitoring across the general estate, name filtering that walks around with the laptop, proper management for Apple hardware, and defence on the handsets carrying your second factors. Thoroughly unglamorous, and the floor every other chamber is standing on.
Put it to a small team: how many machines can reach your treasury tooling? The number that comes back is usually wrong by about two. There is a contractor laptop nobody retired, a spare that was reimaged and never enrolled again, and a phone swapped out without the old one being retired either.
This line closes those holes. It patches, it monitors, it reports what has fallen behind, and above everything else it keeps a list that matches reality. Every sealing control on this site is worth exactly what that list is worth, which is our reason for refusing to sell the exciting lines while the register is absent.
To most businesses a handset is a convenience. To a crypto team it is where the authenticator sits, where a recovery code lands, and where a counterfeit wallet application would very much like to be installed. It earns a control rather than an assumption.
Analysis run on the device picks up cloned applications, phishing destinations and network meddling, with nobody in the middle inspecting your traffic. Where it has no power at all is over a carrier handing your number to a stranger. That takes a call to your provider and a port out lock. Saying as much is better than allowing a product line to hint otherwise.
Billing supplies every figure below while the page loads. An entry holds its place while you go on reading.
Patching, monitoring and remote hands on Windows, on macOS and on Linux, with handset enrolment beside it. This settles the unglamorous question sitting beneath every other control: which machines exist, whose hands they are in, and what has fallen behind on them today.
| Deposited on | Every managed workstation, laptop and server, one unit apiece |
|---|---|
| Seals | Nothing directly; it closes the holes the sealing lines rely on being closed |
| Held at | Inventory, patch state and alert history within N-able N-sight |
| Sealed by | N-able N-sight |
| Witnessed by | Fortify 24x7 engineers acting on whatever the register reports |
Filtering applied at the machine instead of at an office router, so it keeps working from a hotel, a shared desk or somebody's kitchen. Freshly registered lookalike domains are worth refusing, and a drainer campaign leans on them harder than on anything else.
| Deposited on | The same managed devices, priced apart from the register line |
|---|---|
| Seals | Lookups against the refusal list, lookalikes registered this week included |
| Held at | Query and refusal logs within the N-able N-sight filtering service |
| Sealed by | N-able N-sight |
| Witnessed by | Engineers here, holding policy current and going through the refusals |
Mac management done properly: configuration profiles, FileVault key escrow, enforced updates and compliance reporting. Small crypto teams lean heavily towards Apple hardware, and driving those machines through a tool built for Windows leaves holes that surface at the worst possible hour.
| Deposited on | Each enrolled Mac, iPad and iPhone, one unit per piece of hardware |
|---|---|
| Seals | Configuration drift, absent updates and disk encryption nobody is managing |
| Held at | Inventory, profiles and escrowed keys within the Addigy tenant |
| Sealed by | Addigy |
| Witnessed by | Engineers here, holding the baseline and chasing down each exception |
The phone is where an authenticator sits, where a recovery code lands, and where a counterfeit wallet application would dearly like to be installed. Analysis done on the handset itself picks up malware, phishing destinations and network meddling, with none of your traffic shipped off somewhere for reading.
| Deposited on | Each enrolled Android or iOS handset, one unit apiece |
|---|---|
| Seals | Counterfeit apps, phishing destinations and network meddling at the device |
| Held at | Findings within the Zimperium console, with the analysis done on the handset |
| Sealed by | Zimperium |
| Witnessed by | Fortify 24x7 engineers reading findings across the handset fleet |
Fleet management makes an estate knowable and keeps it current. Knowing is a different thing from sealing, and the difference deserves precision.
Heads up: card statements show FORTIFY 24X7 - Cryptinest is a Fortify 24x7 brand, and your subscription is billed by Fortify 24x7.