In production

Lira RDP Security

RDP attack control and centralized blacklist

A lightweight Windows agent collects 4624/4625 events; the portal analyzes login attempts and adds IPs to the rdp_blacklist alias on OPNsense. Built for hosting providers, remote farms, and corporate perimeters.

Capabilities

Windows agent with auto-updates and per-server API keys
Dashboard: map, events, bans, audit
OPNsense rdp_blacklist integration
Multi-tenancy, SSO (Keycloak), role-based access
15-minute agent install per server

Start pilot