Syteca Launches PEDM and ERCC to Extend Endpoint Security

Admin rights and misconfigured endpoints remain two of the easiest ways for risk to enter an organization, and two of the hardest challenges to control without slowing people down. Syteca is now addressing both with a platform extension that brings endpoint privilege governance and continuous compliance monitoring under a single lightweight agent.

What was announced

Syteca has expanded its inside security platform with two new products: Syteca PEDM (Privilege Elevation and Delegation Management) and Syteca ERCC (Endpoint Risk and Compliance Control).

PEDM delivers endpoint privilege management for Windows workstations and servers, granting administrator rights only for approved tasks under clearly defined rules. ERCC adds continuous compliance monitoring, endpoint risk visibility, AI tool governance and guided remediation to help teams close security gaps before they turn into attack paths.

Our customers already rely on Syteca to control privileged access and gain visibility into critical sessions. With PEDM and ERCC, we are extending that control directly to the endpoint, governing which actions get elevated privileges and helping teams identify security or compliance gaps before they lead to incidents. Both products run on the same lightweight agent and management console, so customers can activate the protection they need without adding operational complexity.

Why this matters

For CISOs, CIOs and IT directors, standing local administrator rights and configuration drift are two of the top causes of preventable incidents. Removing admin rights, however, often creates friction for employees and additional ticket load for IT.

PEDM eliminates that trade-off by converting ad-hoc elevation requests into a governed, auditable workflow. ERCC complements this by continuously checking whether endpoints remain compliant with SOC 2 criteria, corporate security baselines and AI usage policies. Together, they help procurement and security leaders consolidate tools, reduce the attack surface and improve audit readiness without deploying separate agents.

Technical details

• Just-in-time elevation: administrator rights granted only for an approved task and limited duration.
• Silent elevation of trusted apps: approved applications run elevated by policy, optionally restricted to specific days or hours.
• Approval workflows: justification required, email notifications to approvers, launches via Syteca Access Center.
• Precise rule targeting: based on file hash, executable name, path prefix, digital signature or command-line parameters.
• Vaulted credentials: approved actions executed under credentials from Syteca workforce password management.
• Continuous compliance checks: automated assessment against SOC 2, security baselines and AI usage policies.
• Endpoint health monitoring: security controls, OS settings, registry values and services tracked across the environment.
• AI tool discovery: desktop apps, browser extensions, IDE plugins, agents and chatbots flagged against policy.
• Risk scoring and remediation: transparent risk scores by endpoint and department with plain-language, prioritized fixes.
• Unified architecture: both products use the same lightweight agent and centralized management console as existing Syteca PAM, ITDR and session monitoring.

Softprom and Syteca

Softprom is the official distributor of Syteca. Our team supports customers and partners with licensing, deployment and technical enablement for the full Syteca platform, including PAM, session monitoring, ITDR, workforce password management, and the new PEDM and ERCC products.

This content was prepared as part of the Softprom DistriFlow project — an automated system for monitoring and adapting vendor news. Original source: original article.