What IT Bastion does

IT Bastion (АйТи Бастион) is a Russian cybersecurity software developer founded in 2014 and headquartered in Moscow. The company specializes in Privileged Access Management (PAM) and controlled information exchange between isolated network segments. Its portfolio centers on the SKDPU NT PAM platform — a modular system comprising an Access Gateway (Шлюз доступа), Monitoring & Analytics subsystem, Access Portal, Operator Console, Audit Archive, and Access Aggregator — alongside Sinoniks, a hardware-based controlled information exchange system (data diode) with physical channel isolation across three boards and FSTEC Russia certification at trust level УД-4. The company also offers SKDPU NT Start for small and medium businesses and Personalnye Seyfy (Personal Safes), a corporate secrets manager integrated into the Access Portal. All products are built on the Russian Astra Linux operating system and are included in the Russian Software Registry (#5559 for SKDPU NT; #22866 for Sinoniks).

IT Bastion's customers are concentrated in regulated sectors — banking, government, oil & gas, critical infrastructure (KII), healthcare, aviation, shipping, and defense — where FSTEC-certified domestic software is mandatory or strongly preferred under import-substitution policies. The company reports over 250 active customers and completed projects, and over 300 certified integration partners across Russia and CIS countries. Named deployments include EMERCOM of Russia, Sovcomflot, Pulkovo Airport, Renaissance Bank, Cherkizovo Group, NPF Budushchee, DataLine, ICS Holding, Yamal Airlines, and Mashinostroitel Plant. Per Piccard research, IT Bastion holds 47% of the Russian PAM market in 2025 (down from 51.6% in 2024).

Revenue is generated primarily through subscription-based licensing of SKDPU NT (annual contracts for enterprise, monthly for MSSP-delivered PAM-as-a-Service), one-time licensing for the Sinoniks data diode, module licensing for Personal Safes, and professional services including a privileged access audit offering launched in June 2026. Go-to-market combines direct enterprise sales for key accounts with a layered channel model: five distributors (Axoft, Merlion, OCS, PROWAY, Тэнит), 150+ system integrators, service partners (Jet Infosystems, Softline, K2 Integratsiya), and a growing MSSP network (Nubes, OXYGEN). FY2025 revenue was 1.8 billion rubles, down 15% year-over-year, with the company attributing the decline to post-import-substitution market saturation.

Name

IT Bastion

Legal name

OOO IT BASTION (ООО «АйТи БАСТИОН»)

Website

https://it-bastion.com

Company type

Private

Founded year

2014

Operating status

Operating

Headcount range

51–100 employees

Short description

IT Bastion is a Russian cybersecurity software company developing Privileged Access Management (PAM) and secure data exchange products. Its SKDPU NT and Sinoniks platforms serve enterprises, government, and critical infrastructure operators across Russia and CIS.

Ownership category

akta.pro rank

Product category

Privileged Access Management (PAM) Software

NAICS

Computer Systems Design and Related Services (54151), Security Systems Services (56162)

SIC

Services-Computer Programming, Data Processing, Etc. (7370)

akta.pro primary industry

Privileged Access Management (PAM) (HDADAAAC)

akta.pro secondary industries

Remote Access & Privileged Access for OT (ZTA/PAM for Vendors) (HDADAJAG), Cybersecurity Operations Outsourcing (SOC / SecOps) (BPAEAMAG), Identity & Access Security Services (IAM, PAM, Zero Trust) (BPAKAHAI)

Keywords

• Privileged access management
• Cybersecurity software
• Data diode solutions
• Secrets management
• Privileged user monitoring

Headquarters

HQ city

Moscow

HQ country

Russia

HQ region

Europe

Offices1 record

Markets served

GTM type

B2B

Offering type

Software

Cost components

Technology or R&D, Personnel, Marketing or Sales, Operations, Infrastructure, Supply Chain

Revenue model

1. PAM Software Licenses (СКДПУ НТ, СКДПУ НТ Старт): Perpetual and subscription-based licensing of PAM platform modules including Access Gateway, Monitoring & Analytics, Audit Archive, and Access Aggregator. Licensed via direct sales and channel partners.
2. Data Diode / Secure Exchange (Синоникс): Sale of information exchange control system with hardware form factor. Licensed via license agreement.
3. Corporate Secrets Manager (Персональные сейфы): Licensed as module within SKDPU NT Portal Access or standalone. Access rights granted via license agreement.
4. Professional Services — PAM Audit: Privileged access audit services including full audit and 'health check' formats. Specialists study documentation, conduct interviews, perform automated infrastructure analysis, and deliver maturity assessment reports with recommendations.
5. MSSP / PAM-as-a-Service Subscription: SKDPU NT offered as managed service by certified partners (Nubes, OXYGEN). Subscription model from 1 month, with full PAM functionality without CapEx. Revenue shared with MSSP partners.

Pricing tiers

Go-to-market motion4 records

Distribution channels5 records

Marketing channels5 records

Core offering

IT Bastion develops and sells Russian cybersecurity software focused on Privileged Access Management (PAM) and secure information exchange. Its flagship SKDPU NT platform controls privileged user access, records sessions, manages secrets/passwords, performs behavioral analytics, and automates incident response. Sinoniks is a data diode / information exchange control system for transferring data between physically isolated network segments. The company also offers SKDPU NT Start (PAM for SMB), Personalnye Seyfy (corporate secrets manager), managed PAM-as-a-Service via MSSPs, and privileged access audit services.

Product overview

IT Bastion (АйТи Бастион) is a Russian cybersecurity software developer offering a portfolio of information security products centered on privileged access management (PAM) and secure information exchange. The flagship product is the modular СКДПУ НТ PAM platform — a unified system comprising the Access Gateway (Шлюз доступа), Monitoring and Analytics (Мониторинг и аналитика), Access Portal (Портал доступа), Operator Console (Кабинет оператора), Audit Archive (Архив аудита), and Access Aggregator (Агрегатор доступов) subsystems. The second core product is Синоникс, a data diode/information exchange control system for secure transfer between isolated networks, which complements the PAM platform by controlling inter-segment data flows. A third product, СКДПУ НТ Старт, provides lightweight PAM functionality for small and medium businesses. An integrated add-on, Персональные сейфы (Personal Safes), is a corporate secrets manager for passwords, SSH keys, API keys, and certificates, embedded in the Access Portal. The company also offers СКДПУ НТ as a managed service via its MSSP partner program, and a professional privileged access audit service. All products are built on Russian operating systems (Astra Linux), certified by FSTЭК Russia and entered in the Russian Software Registry, targeting enterprises, government, and critical infrastructure (КИИ, АСУ ТП) sectors.

Differentiator

Problem solved

Functional benefit

Brands

• SKDPU NT: PAM platform (Privileged Access Management) for monitoring and controlling privileged user actions, session recording, behavioral analytics, and incident response.
• Sinoniks
• SKDPU NT Start
• Personalnye Seyfy (Personal Safes)

Products and services

• СКДПУ НТ (SKDPU NT) Comprehensive Privileged Access Management (PAM) platform for large organizations, providing access gateway, session recording (video/keystrokes/microphone), behavioral analytics, anomaly detection, secrets management, and automated incident response. Comprises subsystems: Access Gateway, Monitoring & Analytics, Access Portal, Operator Console, Audit Archive, and Access Aggregator. FSTEC Russia certified at IV trust level and entered in the Russian Software Registry (entry #5559).
• Синоникс (Sinoniks) Automated secure information exchange control system (data diode) for transferring data and files between isolated network segments. Operates on physical isolation principle with three electronic boards (Node A, Node B, Core) supporting unidirectional and bidirectional TCP/UDP protocols. Supports Modbus TCP, MQTT broker telemetry, SCADA integration, and three file validation modes. FSTEC Russia certified (УД-4) and certified in the Republic of Belarus.
• СКДПУ НТ Старт (SKDPU NT Start) Lightweight PAM solution for small and medium businesses providing essential privileged user access control and session recording functionality without requiring dedicated IT security staff. Targeted at companies with small admin teams or local infrastructure. Designed for quick deployment by in-house IT, with upgrade path to full SKDPU NT.
• Персональные сейфы (Personal Safes) Corporate secrets manager for secure storage, transfer, and use of passwords, SSH keys, API keys, and certificates. Features personal and team vaults, 'seal' two-factor access control, password generator, corporate password policy enforcement, LDAP/AD/ALD Pro integration, and Keepass import. Integrated into SKDPU NT Access Portal.
• СКДПУ НТ as a Service (PAM-as-a-Service via MSSP) Managed delivery of the full SKDPU NT PAM platform via certified MSSP partners (Nubes, OXYGEN). Available by subscription from 1 month. Eliminates need for on-premise license and in-house IT security staff; provider handles onboarding, configuration, monitoring, and incident investigation.
• Privileged Access Audit Service Professional audit service for SKDPU NT deployments evaluating PAM system effectiveness, coverage, and regulatory compliance. Available in two formats: full audit (comprehensive configuration review, policy analysis, coverage assessment, compliance check) and 'health check' (basic correctness assessment). Specialists study documentation, conduct interviews, perform automated infrastructure analysis, and deliver maturity assessment reports.

Quantifiable outcome

• 201% ROI with 10-month payback for typical organization using SKDPU NT
• +5 more outcomes

Named customers14 records

Ideal customer profiles3 records

Technology focussed Yes

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Integration22 records

AI capability5 records

Feature8 records

Partnerships

Ten partnerships are on record, tiered core and minor.

• OXYGENcoreChannel Partner/ Reseller/ Distributor · 1 June 2026MSSP provider. Certified to distribute SKDPU NT as service and provide privileged access control services based on own cloud infrastructure. PAM-as-a-Service with subscription from 1 month.
• RUSSOFT (Ассоциация РУССОФТ)coreOthers · 13 May 2026IT Bastion joined RUSSOFT — Association of Software Developers, one of the largest associations of IT companies in Russia. Plans to share expertise in information security, participate in industry standards development, and access international markets through RUSSOFT's global network.
• Merlion (Technical Center)Implementation/ SI/ Consulting Partner · 7 May 2026Merlion Technical Center launched updated demonstration stand for SKDPU NT. Full deployment of current module lineup in conditions close to real IT infrastructure for partner demonstrations and load testing.
• KРОКminorImplementation/ SI/ Consulting Partner · 28 January 2026Gold partner of IT Bastion completed pilot testing of Sinoniks. Solution demonstrated promising capabilities for secure data exchange between isolated network segments.
• NubescoreChannel Partner/ Reseller/ Distributor · 1 January 2026First MSSP partner of IT Bastion. Provides cloud infrastructure on own Tier-III data center in Moscow. Distributes SKDPU NT as managed service.
• Kaspersky Lab (Лаборатория Касперского)coreTechnology or Integration · 31 October 2025Integration of Sinoniks with KUMA SIEM system. Sinoniks event normalizers included in standard KUMA repository. Automated processing of Sinoniks logs in SIEM accelerates incident analysis and threat detection.
• AlfaStrakhovanie (АльфаСтрахование)coreStrategic or Co-development Partner · 19 May 2025Strategic partnership signed at CIPR conference. Companies will develop solutions combining information security tools and cyber risk insurance within a single service. Clients can connect cyber protection tools simultaneously with insurance coverage in subscription format.
• Aquarius (Аквариус)coreStrategic or Co-development Partner · 1 January 2025GК Aquarius and IT Bastion signed strategic partnership agreement. Program complex Sinoniks will be implemented on Aquarius hardware platform. Document signed in Nizhny Novgorod at CIPR conference.
• USC SB (Уральский центр систем безопасности, УЦСБ)minorImplementation/ SI/ Consulting Partner · 1 January 2025Authorized partner that provided deployment and configuration of SKDPU NT at Mashinostroitel plant.
• PROF-IT GROUPminorChannel Partner/ Reseller/ Distributor · 1 January 2025New partnership agreement signed in 2025 with integrator having expertise in industrial sector. Contributed to partner network expansion.

Scale indicators10 records

Recent moves6 records

Expansion highlights7 records

Emerging players

• Инфосистемы Джет (Jet Infosystems): Major Russian cybersecurity systems integrator and emerging PAM/service provider. Overlaps with IT Bastion as both a service partner and competing MSSP delivering PAM solutions to Russian enterprises.
• Kaspersky Industrial CyberSecurity: Kaspersky's OT/ICS security portfolio partially overlaps with IT Bastion's Sinoniks data-diode and OT-focused PAM capabilities, addressing industrial and critical-infrastructure buyers in Russia.

Direct peers

• Delinea (formerly Thycotic + Centrify): Global PAM vendor combining Secret Server and Privileged Behavior Analytics. Direct peer in privileged account management, session recording, and behavioral analytics.
• BeyondTrust: Major global PAM vendor offering privileged password management, session recording, and endpoint privilege management. Direct competitor in PAM with comparable enterprise/critical-infrastructure positioning.
• WALLIX: European PAM specialist (France) offering Bastion, a unified PAM platform with session management, password vaulting, and OT access control — a close functional analogue to SKDPU NT.
• One Identity (Quest Software): Vendor of One Identity Safeguard PAM and identity governance suite. Competes with IT Bastion in privileged session management, password vaulting, and integrated IAM/PAM workflows.
• CyberArk: Global leader in Privileged Access Management with the CyberArk Privileged Access Manager platform. Direct PAM peer with comparable scope (vaulting, session recording, analytics) and overlapping enterprise/government buyer personas.
• Solar (ГК Solar, Ростелеком-Солар): Russia's #3 PAM vendor at 10% market share, owned by Rostelecom. Competes head-to-head with IT Bastion in privileged access management for Russian enterprises and state organizations.
• Indid (formerly IDM-системы, part of Avanpost group): Russia's #2 PAM vendor at 26% market share per Piccard 2025. Directly competes with IT Bastion's SKDPU NT in the Russian enterprise and government PAM market with a similar FSTEC-certified offering.

Broad incumbents

• ManageEngine (Zoho): Broad IT management vendor offering Password Manager Pro and PAM360 as part of a wider suite. Competes with IT Bastion in PAM while serving broader sysadmin and IT-ops use cases.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat5 records

Key risks6 records

Key highlights7 records

Customer concentration

• LinkedInlinkedin.com/company/it-bastion

Compliance9 records

Revenue estimate

Valuation estimate

Number of profiles

Profiles5 records

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about IT Bastion