Brief

Enterprise-Grade Privileged Access Management Platform

SWARAJ Nandi secures and governs privileged access across critical systems, preventing unauthorised access, reducing cyber risk, ensuring compliance and protecting against insider and external threats.

Overview

Highlights

Swaraj Nandi provides secure, scalable, and reliable data center solutions designed to support critical business applications and IT infrastructure. The solution offers high availability, robust security, efficient resource management, and dependable performance for hosting applications, databases, and enterprise workloads.

Usage

Support

What exactly is SWARAJ Nandi and why did ESDS build it?

SWARAJ Nandi is ESDS’s enterprise-grade Privileged Access Management platform, developed in India for deployment within an organisation’s own infrastructure. While many PAM solutions are designed to address enterprise requirements across multiple markets, SWARAJ Nandi is built with the needs of Indian enterprises in mind, including governance, auditability and regulatory frameworks such as the RBI IT Framework, CSCRF and the DPDP Act. It enables organisations to retain control over privileged credentials, session records and audit logs within their chosen deployment environment.

Can SWARAJ Nandi actually demonstrate RBI and PCI DSS compliance?

SWARAJ Nandi is designed to support organisations in meeting regulatory and compliance requirements through built-in governance, audit and reporting capabilities. Access approval workflows, session recordings, credential rotation logs and risk reports provide evidence to support audit and incident reporting processes. The platform includes dashboards aligned with frameworks such as the RBI IT Framework, PCI-DSS v4.0, CSCRF, ISO 27001:2022 and NIST CSF, with exportable reports in HTML and PDF formats. While SWARAJ Nandi facilitates compliance readiness and audit preparation, compliance, certification and regulatory adherence remain the responsibility of the organisation and the applicable assessing or certifying authorities.

What stops a privileged user or a rogue admin from doing damage inside a session?

SWARAJ Nandi applies multiple layers of control to help reduce the risk of unauthorised or inappropriate privileged activity. First, privileged access is governed through access requests, approvals, MFA and time-bound policies, with sessions ending when authorised access expires. Second, command control policies enable administrators to define permitted and restricted commands for specific systems, with policy violations generating alerts and configurable response actions. Third, built-in User and Entity Behaviour Analytics (UEBA) continuously analyses user activity to identify anomalies such as unusual access times, unfamiliar targets, large data transfers or concurrent sessions from multiple locations. Based on defined risk thresholds, organisations can trigger additional verification, alerts or administrative intervention, including session termination where configured.

Where do the session recordings go and how do we know they have not been tampered with?

Session recordings and audit data are stored within the organisation’s designated deployment environment, in accordance with the selected deployment architecture. SSH sessions can be captured as indexed, replayable asciicast files, RDP sessions as screen recordings and database activity as query logs. To support integrity verification, a SHA-256 hash is generated for each recording at the end of a session and retained for validation. Any subsequent modification can be identified through hash verification. The platform also incorporates controls to help protect audit records from unauthorised modification or deletion, supporting evidentiary integrity during security investigations and audits.

How does this integrate with our existing Active Directory, SIEM and ticketing systems?

SWARAJ Nandi is designed to integrate with existing enterprise identity, security and IT service management environments through standard protocols and APIs. It supports Active Directory integration via LDAPS for user synchronisation and Single Sign-On using OIDC and SAML 2.0. Privileged access events can be forwarded to SIEM platforms for monitoring and reporting, while integration with ServiceNow enables access request and change management workflows. The platform also supports SMTP-based notifications for approvals, alerts and operational communications, allowing organisations to integrate SWARAJ Nandi with their existing security and IT operations processes.

What is the deployment model and what does it cost to run at scale?

SWARAJ Nandi supports multiple deployment models, including on-premise, private cloud and a managed PAM-as-a-Service offering from ESDS. The platform is designed on a three-tier architecture comprising application, session gateway and database components, with documented infrastructure requirements for deployment on supported environments such as Ubuntu 22.04. Licensing and deployment are structured to provide flexibility based on organisational requirements, with managed service options available for customers who prefer ESDS to operate and maintain the platform. Total cost of ownership will vary depending on deployment model, infrastructure and operational requirements.

ESDS is known for data center. why should we trust you on a cybersecurity product?

ESDS has over 20 years of experience in managing critical IT infrastructure for organisations across BFSI, Government & PSUs and enterprises in India. SWARAJ Nandi builds on this operational experience to deliver an enterprise-grade Privileged Access Management platform. The current General Availability (v1.0) release includes 29 functional modules, 292 API endpoints, 55 user interface screens, 118 database tables and support for privileged sessions across SSH, RDP, relational databases and network devices. The platform has been designed for deployment in enterprise environments with a focus on governance, security and operational reliability.

Categories