Sixteen Security Tools. One Managed Agent.

Badger architecture

Three Enforcement Stages. Plus Audited Remote Support.

Most endpoint tools only watch after a user has already logged in, and most MFA tools only protect browser tabs. 1Key divides protection into named modules that cover the machine before login, during the session and when someone calls for help.

1. 01Badger Gate — Before they get in.Replaces the Windows and macOS login screen itself (and Linux ssh and sudo via PAM) with passwordless multi-factor authentication before anyone reaches the desktop. Offline RFC 6238 codes work with zero internet so a network outage never locks out your team.
2. 02Badger Guard — Always running.Continuous endpoint service across Windows, macOS, Linux and ChromeOS: live hardware and software inventory, patch management, software deployment, disk-encryption posture, application allowlisting, USB storage lockouts and a kernel-level default-deny firewall.
3. 03Badger Guardian — After they log in.Keeps an active desktop session honest: re-checks user presence and posture, locks the screen when IP, country, time-window, GPS geofence or rogue Wi-Fi rules trip, and hands control back when the authorized person returns.
4. 04Badger Den — Audited remote support.Browser-based remote desktop, terminal and live view with role-gated access and a complete operator audit trail. View-only mode is enforced by the server, and when a health monitor trips, the machine files its own help desk ticket with device posture attached.

“A sign-in system that locks everyone out when the internet goes down is a liability, not a security feature. Badger Gate verifies offline codes right at the login screen.”

Built-In Recovery, Packet Forensics and Data Loss Prevention

Capabilities that usually require separate backup appliances, network taps or proxy agents are built directly into the 1Key agent and managed from the same HAWKiTECH console.

• Badger Vault

  Immutable backup with no delete command

  Captures files and SQL Server databases from volume snapshots, encrypts them on the endpoint with AES-256-GCM and writes them to object storage under WORM retention lock. A restore point can be extended, never shortened — so even an attacker holding console credentials cannot erase your recovery.

• Badger Wire

  Remote packet capture and 3D topology

  Capture live PCAP traffic from any managed machine and dissect protocols in the browser alongside a live 3D map of what is talking to what. Our engineers investigate suspicious traffic immediately without configuring SPAN ports or rolling a truck.

• Badger Sentry

  Inline data loss prevention

  Payment card numbers, national ID numbers and custom organizational patterns are caught inline on traffic already passing the filter, stopping accidental or malicious exfiltration at the endpoint.

• Kernel Default-Deny & JIT PAM

  Stop ransomware lateral movement

  Application allowlisting blocks unapproved executables from running, kernel-level network rules block unauthorized command-and-control callbacks, and standing local admin rights are replaced with just-in-time elevation and rotated per-machine LAPS passwords.

Proof for Your Auditor and Cyber-Insurance Carrier

Compliance reports and insurance questionnaires should come from what the agent actually measures on your machines, not a manually maintained spreadsheet. HAWKiTECH generates scored, printable control reports and cyber-insurance renewal evidence packs directly from live 1Key telemetry.

• NIST SP 800-53 Rev. 5
• NIST CSF 2.0
• SOC 2 Trust Services Criteria
• PCI-DSS
• CJIS Security Policy
• NERC CIP-003-8
• CIPA (K-12 filtration)
• Texas CUBI (biometric privacy)

1Key, Badger Gate, Badger Guard, Badger Guardian, Badger Den, Badger Vault, Badger Wire, Badger Sentry, Raven Key, B.A.T. Key, Dolphin Key, Cub Key, 1Start, 1Voice, 1Meeting, 1Garage and 1QR are products and trademarks of 0101 Inc.