Security · 4 min read
SSO and built-in XDR land in LynxTrac
Two things teams kept asking for are now live: single sign-on over SAML and OpenID Connect, and a Wazuh-powered XDR and SIEM suite on the agent you already run.
Read article
Blog
Guides, playbooks & IT deep dives
Practical writing on RMM, remote access, continuous deployments, and log analysis from the LynxTrac team.
MTTR · 3 min read
First 30 minutes of an IT incident: what great teams do
The first 30 minutes make or break MTTR. Here are the concrete moves high-performing teams make, and the anti-patterns we see everywhere else.
Read article
KMS · 3 min read
Using AWS KMS for secure SSH credential management
Storing SSH credentials safely is harder than it looks. AWS KMS fits into a modern access flow in specific ways, with specific frictions and pitfalls worth naming.
Read article
MTTR · 3 min read
Incident response without VPN access: a practical guide
Your pager just went off and the VPN is down. What follows is a practical runbook for getting to the affected system, gathering context, and fixing it without tunnels.
Read article
Remote Desktop · 2 min read
When to use browser-based vs thick-client remote desktop
Browser remote desktop is not always the right call. The decision grid we use to pick between web and native clients is small, but it covers most of the real cases.
Read article
SSH · 5 min read
Is browser-based SSH secure?
A walk through the actual threat model of browser-based SSH, what it trades away, and what it gains. The answer isn't a one-liner, but it's close.
Read article
SSH · 4 min read
SSH access without sharing private keys
Why key-sharing is the silent disaster in most ops teams, and a practical pattern for getting rid of it without a six-month rewrite of how you do access.
Read article
Server Monitoring · 3 min read
The cost of slow visibility in IT operations
Every minute between symptom and visibility has a dollar attached. The math is worth working through, because it points directly at where to close the visibility gap.
Read article
Port Forwarding · 3 min read
Secure port forwarding without exposing services
Port forwarding gets services reachable, and accidentally everyone else. Here are patterns for controlled forwarding that do not turn firewalls into rubber stamps.
Read article
Remote Access · 3 min read
Why remote access should never be a standalone tool
Remote access without context is just a shell in the dark. Access, monitoring, and audit belong on one surface rather than three separate purchases.
Read article
Security · 2 min read
Security trade-offs of browser-based access
Browser-based access removes VPNs and shared keys, but it is not a free lunch. The honest trade-off list is short, and every item on it is mitigatable.
Read article
Remote Access · 4 min read
How VPN-free remote access works
What the outbound-agent model actually does, versus what a VPN does. Written because enough people have asked variations of 'so how is this different from Tailscale?'
Read article