Knocknoc

Knocknoc provides network allowlisting technology that orchestrates network-level access controls integrated with identity platforms. The solution keeps network ports closed and services invisible until users authenticate centrally, creating a zero attack surface environment before authentication occurs. The platform works by dynamically orchestrating existing infrastructure components including firewalls, network security groups, WAFs, and endpoint firewalls to permit only trusted IP addresses or token holders on a just-in-time basis. Knocknoc does not route traffic through third-party clouds or function as a VPN service. Instead, it orchestrates existing network controls to make infrastructure invisible until authentication completes. The solution protects various network-exposed services including SSH, RDP, Citrix, VPN endpoints, file sharing, legacy applications, development environments, and remote access interfaces. It integrates with major cloud providers (AWS, Azure, Google Cloud, DigitalOcean), remote access solutions (Fortinet, Palo Alto, Ivanti, OpenVPN), PHP applications (WordPress, Laravel, Moodle, Nextcloud), and Atlassian products (Confluence, Jira, Bitbucket, Bamboo). Knocknoc can be deployed on-premise, in customer clouds, or as managed cloud hosting. The platform includes a flexible scripting backend for customization and uses cross-platform agents with minimal networking requirements. It can function as a VPN replacement or complement existing VPN infrastructure for fine-grained access control. The company targets organizations with internet-facing applications, high-security internal networks, OT/ICS networks, and environments requiring protection from zero-day vulnerabilities.