Identity & sign-in

Modern authentication for customers and staff, with conservative linking rules.

OAuth sign-in

Google, Microsoft and GitHub login and registration. Auto-linking only on provider-verified emails, with known cross-tenant takeover patterns rejected.

Admin SSO (OIDC)

Bind admin logins to Okta, Entra ID, Keycloak or any OIDC IdP with strict subject binding, no just-in-time provisioning, and a logged break-glass path.

Self-registration

Onboard customers without admin involvement: Turnstile or reCAPTCHA, signed email verification, and a post-verification top-up flow.

Teams & access

The right people see the right resources, and nothing else.

Team RBAC

Multi-account teams with role-based permissions. Destructive operations sit behind separate grants.

Scoped subusers

Subuser tokens see exactly the resources their team permissions grant, across the API, metrics export and support queues.

Private locations

Lock any region to selected accounts. Locked regions stay visible with a request-access flow and an admin approval queue.

Enforcement & assurance

Guardrails at every layer.

Security groups

Per-instance accept and drop rules with IP sets and anti-spoofing filters, enforced identically on KVM and Proxmox.

CSF-aware firewalling

On a KVM node running ConfigServer Firewall, the hypervisor agent detects it and leaves host port management to CSF instead of fighting it for the INPUT chain. Security groups, VPC NAT and the console proxies keep working alongside csf.conf.

Tenant boundaries

SSH sessions, S3 keys, certificate renewal and VPC selection all bind to the owning tenant. Server-side gates on every create path.

Audit trails

Audit trails across the platform, with secrets encrypted at rest and in queue payloads.

AI guardrails

The assistant gets defense in depth: streaming egress redaction, fail-closed knowledge scoping, and untrusted-data framing around tool output.

Readiness engine

Every node carries a live checklist of the real deploy gates, with failure-specific fix hints instead of log spelunking.

Honest error surfacing

Customers see clear messages; admins get the precise original error, throttled per distinct cause, and everything is logged.

Deeper look

Every account, and the role it holds

Staff and customer accounts in one list, with the role-based permissions each one carries.

app.virtconsole.com/users

VirtConsole user list showing staff and customer accounts with roles and status

Every account, its role, and its status, searchable

The right people see the right resources, and nothing else