Ephemis

Access with an expiration date

Production access
that expires.

Ephemis gives engineers short-lived, approved and recorded access to databases, servers, Kubernetes and AWS, in minutes. Nothing standing to steal, and the evidence your auditor asks for, already collected.

Talk to the founder See how it works

Clarity

Know before you ask

See whether a request will be approved, denied or auto-approved before you submit it. Approve in Slack or the CLI. Be in the session in minutes.

Short-lived credentials

Every session gets its own key

Ephemis creates a credential when the session starts and removes it when it ends. No shared admin passwords, for people or for automation.

Accountability

Evidence by default

Every request, decision and session is logged in an audit trail that even an admin can't edit, and sessions are recorded.

From request to record

How it works

  1. Connect your databases, servers, clusters and AWS accounts

    An outbound-only connector for private networks is in development.

  2. Write access policy as code (OPA)

  3. Engineers request, see the outcome, and get approved

  4. Every session is recorded and audited

Who it's for

For the team behind
the next milestone.

Security and platform teams at fast-growing fintech, healthtech and SaaS companies, preparing for an audit, an insurance renewal or their first enterprise customer.

Build with us

We're working with a small group of design partners.

Talk to the founder