Thand delivers an open-source distributed agent for privilege access management (PAM) and just-in-time access (JIT) to cloud infrastructure, SaaS applications and local systems. It uses Serverless Workflows and Temporal to orchestrate and guarantee robust deterministic workflow execution and revocation of permissions across cloud/on-prem environments and systems.

Thand eliminates standing access to critical infrastructure and SaaS apps. Instead of permanent admin rights, users request access when needed, for only as long as needed.

Thand eliminates the need to write custom code for credential management, access policies, and permission lifecycles. It simplifies your infrastructure by providing a unified access control layer – delivering zero standing privileges, no static credentials, and complete audit trails for compliance.

# Install Thand Agent
curl -sSL https://get.thand.io | sh
thand --help

Organizations use Thand today for securing access to mission-critical infrastructure and sensitive systems. Run it locally for sudo, UAC. Or in the cloud for IAM or for individual applications. Connect to Thand Cloud for enterprise features including AI-driven insights, centralized management, and advanced compliance reporting.

• Website
• Agent
• Thand Demo (video)
• Getting Started (tutorials)
• Slack Community
• Documentation