Solutions

What Tessera replaces

One page per problem, because these arrive as separate questions months apart. Some are about architecture and start with something somebody inherited. Some are about evidence and start with a date in the calendar. The first one below is the most common reason anybody reads any of the others.

• SOC 2 and ISO 27001 access evidence What an auditor actually asks for when they test an access control, and which artefacts answer it.
• Bastion host and jump server alternative Keep the network topology, lose the shared onward key, the login-only log and the machine you have to patch.
• Just-in-time access Requests with a reason, an approver and an expiry that revokes the grant and drops the live session with it.
• SSH session recording Commands and full terminal replay, captured at the broker rather than by a wrapper on the host that can be switched off.
• Kubernetes access control Cluster credentials injected per request, every call audited, and nothing installed in the cluster.
• Database access management PostgreSQL and MySQL brokered so nobody receives the password, with every statement recorded.

Comparing named products instead? Tessera against Teleport, StrongDM and Boundary, each checked against that vendor's own documentation.