"The internal network is safe" — that assumption is over. Just install ZRG to apply Zero Trust to RDP, SSH and local connections. It automatically blocks unauthorized access based on your policies, and keeps logs and screenshots for auditing. No expertise required. Deploys in 5 minutes. Remote, local, and Azure Virtual Desktop (AVD). Now in Beta — free by invitation.
The traditional "trust the internal network" model can no longer protect against modern threats like remote work, cloud access, and lateral movement.
"Anyone inside the network is trusted" — this assumption collapses with remote work, cloud services, and VPN access. Once an attacker breaches the perimeter, they move freely inside.
Zero Trust means verifying every access request regardless of network location. Whether inside the office, over VPN, or remote — every connection is checked against policy.
Zero Trust usually requires major infrastructure changes. ZRG just installs on your existing Windows environment. No network reconfiguration needed — the three principles (continuous verification, least privilege, assume breach) apply to all connections instantly.
Install ZRG Agent on each server or PC you want to protect. Done in 5 minutes. No network changes required.
Define "who can connect, from where, and when" as policies in the management console (Exment). Just point and click.
Connections outside policy are blocked automatically. Logs and screenshots are recorded — Zero Trust monitoring is live.
Apply Zero Trust principles to address the risks of RDP and SSH connections. With ZRG, you can start right away — no expertise needed.
Attackers breach perimeters via phishing or leaked credentials, then move freely inside using RDP. Perimeter defense can't stop internal attacks. ZRG detects unauthorized connections and blocks them automatically.
Former employees' accounts often remain active. Zero Trust means no access without explicit authorization. ZRG lets you revoke access per user or IP — instantly, without waiting for AD updates.
"Who connected when?" — answering this from Windows event logs alone is difficult. Based on the assume-breach principle, ZRG keeps searchable connection logs and automatic screenshots ready for auditors.
ZRG monitors not just RDP — local logons to PCs are also tracked. Eliminate the assumption that "internal devices are safe" and apply Zero Trust to every endpoint.
Commercial remote-access management tools are expensive and complex. ZRG aims to be lightweight, simple and secure — easy for any SMB to deploy.
The Agent + Firewall architecture monitors, controls and records remote connections in real time.
Monitors RDP and SSH sessions in real time. Automatically blocks unauthorized connections based on your policies. Switch between detection mode (alert only) and block mode.
Periodically captures and saves screenshots during active sessions. Useful for incident investigation and compliance auditing.
Records who connected, when, from where, and to which server. Logs can be searched, filtered and exported to CSV from the Exment management console.
A straightforward architecture that deploys quickly.
A Windows service installed on each monitored server. Detects RDP and SSH sessions, captures screenshots and enforces policies.
Dynamically manages Windows Firewall rules to block unauthorized connections. Rules persist even if the agent stops.
A web-based console for managing connection logs, policies and screenshots. Runs on Exment, so you can host it on-premises, in the cloud, on a rental server, or use Exment SaaS.
Also supports Azure Virtual Desktop (AVD) environments.
Enterprise features at SMB-friendly pricing
| Feature | ZRG | Major PAM | Remote Access Tools | RD Gateway |
|---|---|---|---|---|
| Connection logs | ● | ● | ● | △ |
| Screen capture | ● | ● | ● | ✕ |
| Approval workflow | ● | ● | ✕ | ✕ |
| Copy-paste control | ● | ● | ✕ | ✕ |
| USB device control | ● | ● | ✕ | ✕ |
| Multi-hop RDP | ● | △ | ✕ | ✕ |
| Price | Free~ | $$$ | Contact | Server license |
| Setup time | 5 min | Months | Days | Hours |
Features expand in stages. v1 alone covers the major threats.
ZRG software is provided free of charge. Paid support plans are available when you need them.
Free
No limits on users or devices
Installation, configuration, operation, upgrades, troubleshooting
| 5 tickets | ¥160,000 |
| 10 tickets | ¥300,000 |
| 20 tickets | ¥550,000 |
| 30 tickets | ¥800,000 |
| 40 tickets | ¥1,000,000 |
1 ticket ≒ up to 3 hours (excl. tax)
Additional: ¥30,000/ticket
On-demand assistance when you need it
¥90,000〜
Per request (separate quote)
Approx. 4 hours of work (excl. tax)
Any environment that runs Exment can serve as the ZRG management server.
Latest development status and updates for ZRG
Invite-only early access has started. All features are free during Beta.
Screen capture, keyboard/clipboard monitoring, Firewall control, and approval workflows fully implemented.
Exment portal 2-step authentication and source IP whitelist implemented.
RDP copy-paste block, USB device control, local resource restrictions.
ZRG project launched with Agent + Firewall architecture.
For questions about adopting ZRG or for more details, please contact us in English or Japanese.