Premium
Service traps
Start/stop decoy listeners for RDP, SSH, MSSQL, MySQL, and FTP from the panel. Capture usernames, passwords, and source IPs on bait only.
Features
Everything the product can do — spelled out.
Written so a technical buyer can brief their team without a sales call. Plan limits are called out where they matter.
Deception
Premium
Ransomware signals
Canary files and shadow-copy abuse heuristics escalate to urgent alerts before encryption becomes a fait accompli.
Agent
Host-local bait
Traps run on the Windows host you protect — not a shared multi-tenant honeynet you can’t control.
Detection & visibility
Premium
Threat center
Critical alerts, geography, and auto-block outcomes on an overview that updates without a full page refresh.
Both plans
Attack history
Standard: limited history. Premium: full filters and exports for investigations and customer reports.
Live
Heartbeats & online state
Know which agents are reachable. Public site also shows anonymous network totals — real probes, real agents.
Response
Premium
Auto-block & firewall rules
Push and sync Windows Firewall rules with Asteria prefixes (AR-BLOCK / AR-INTEL). Clear when the case is closed.
Premium
Remote desktop & host actions
Live remote view, lock/logoff sessions, terminate processes, manage services and firewall — authenticated push over the control channel when you need hands on the box now.
Premium
Email alerts
Successful-login and high/critical threat mail to your notify address — same mailbox used for password recovery.
Ops, intel & repair
Premium · agent ≥4.9.79
Windows Tools & Repair
Catalog, diagnose, and run guided OS repairs from the dashboard (Winsock, firewall, Windows Update resets and more) with soft/hard confirm — without RDP to the box.
Premium
Threat intel feed
Cloud-published IoC bundles (ETag) push to agents over the control WebSocket; agents ACK apply. Firewall rules use AR-INTEL alongside AR-BLOCK.
Live
Control channel
Persistent authenticated WebSocket for command push, presence, and config/intel hints — HTTP command poll remains as fallback.
Premium
Tunnels & recovery
Managed reverse tunnels and recovery tooling for stranded hosts — from the same multi-server account.
Cloud, accounts & agent lifecycle
Multi-server membership
One email account links many agents. Sign in once; manage the fleet. Advanced single-server password login still available.
Always-current installer
asteria.run points at the latest GitHub release for the Asteria Agent. Verify SHA-256; prefer code-signed builds for SmartScreen.
Seats & billing
Premium includes a set of servers; add seats as you grow. Details and checkout on Pricing.
Security review pack
Permissions, data-to-cloud, and scenario tables live on Security for questionnaires.
Plan matrix
| Capability | Standard | Premium |
|---|---|---|
| Cloud dashboard & multi-server account | Yes | Yes |
| Link servers / overview | Unlimited (STD limits) | Included seats + extras |
| Attack history | Limited | Full filters & export |
| Service traps | — | Yes |
| Threat center & auto-block | — | Yes |
| Remote desktop & host actions | — | Yes |
| Tools & Repair toolkit | — | Yes (agent ≥4.9.79) |
| Threat intel feed | — | Yes |
| Threat / login email alerts | — | Yes |