Shield your ATMs against internal fraud and jackpotting by applying least privilege, without sacrificing the agility of your maintenance work.
ATMGuard is the access control platform that lets your technicians and operators run critical tasks through temporary authorizations, 100 % offline and cryptographically bound to each ATM's hardware.
The challenge of operating ATMs
Giving permanent or shared credentials to outsourced technicians opens the door to internal fraud and operating system manipulation (jackpotting).
Relying on constant help desk calls to authorize every step of a maintenance job, however, drives up downtime (SLA) and operating costs.
The solution
Controlled execution with temporary privileges: we take operating system control away from the technician and hand it to a Resident Agent (SYSTEM), which acts only when it receives exact mathematical proof that the operator is authorized for that specific machine.
Technology pillars and benefits
Tokens bound to physical hardware
Forget shared passwords. Our access code (TOTP) is generated from the unique fingerprint of the ATM's motherboard. A code generated for ATM A is mathematically useless on ATM B.
Full privilege isolation
The operator never interacts directly with the bank's critical executables. A system-level agent validates the cryptographic proof and launches the applications inside a hardened IPC tunnel. Least privilege at its finest.
Reboot-resistant maintenance
Our encrypted session vault survives operating system reboots. If a technician has to restart the ATM three times during an update, there is no need to call support for new codes. It drastically reduces your SLA times.
100 % offline operation
All security validation happens locally on the endpoint. It needs no internet or corporate network connection to authenticate the user, which makes it ideal for ATMs in rural areas or highly restricted networks.
Military-grade security in three steps
Centralized generation
The help desk generates a temporary PIN from the Operations Center using the Hardware ID of the ATM to be serviced.
On-site validation
The technician enters the PIN at the ATM. ATMGuard verifies offline that the PIN matches the physical machine and falls within the allowed time window.
Isolated execution
The Resident Agent takes control, validates the signature and runs the configurator or diagnostic application with elevated privileges, limiting the technician to exactly what they need to do.
Aligned with financial regulation
Eases compliance with regulations such as PCI-DSS and regulatory bodies' circulars.
ATMGuard® guarantees traceability, eliminates generic credentials and ensures that no critical software is ever executed without an explicit, temporary authorization.
Take real control of your ATM fleet
Discover how ATMGuard® can reduce your maintenance costs and shield your network against logical threats starting today.
Support and professional assistance
Contact a specialist or schedule a demo of ATMGuard®.
