Overview

ET Ducky is delivered as a fully-managed cloud platform. Every customer runs on hosted infrastructure that ET Ducky operates, with no infrastructure for the customer to manage. Cloud Hosted runs every customer on shared infrastructure that ET Ducky operates and scales centrally, included in the subscription. Customers who need single-tenant isolation run Local-First (self-hosted) rather than a dedicated cloud tier.

• Zero infrastructure management for the customer
• Automatic platform updates and capacity scaling
• Same agent, same dashboard, same feature set on either infrastructure model
• Under one hour from sign-up to first agents online

Shared Infrastructure

The default cloud tier. All customers run on shared backend infrastructure that ET Ducky operates and scales centrally. There is no agent-count limit on shared infrastructure; capacity is scaled by the platform as fleet size grows.

• Dedicated subdomain per workspace. Every workspace gets its own subdomain on etducky.com for the dashboard, agent endpoints, and API access. Subdomains are not shared between tenants.
• Per-tenant data isolation. Every database table that holds tenant data is gated by row-level security tied to the organization identifier. The application layer cannot read another tenant's data even with a SQL error in a query path.
• Full platform feature set. ETW and eBPF collection, AI live sessions, remote desktop, behavioral detection, smart reports, automations, KB documentation, and security posture monitoring are all available on shared infrastructure.
• Shared backend capacity. API servers, the Postgres cluster, and message queues are sized for typical fleet workloads and shared across all tenants on the platform.

Single-Tenant Isolation

ET Ducky does not sell a dedicated cloud tier. Cloud Hosted is shared multi-tenant for every customer, with per-tenant isolation enforced by row-level security and a dedicated subdomain per workspace, and the infrastructure is included in the subscription at no additional charge.

Organizations that require single-tenant infrastructure — for compliance attestations, data residency, or an air-gapped segment — run Local-First (self-hosted) instead. That model puts the entire stack on infrastructure you control, with unlimited agents and technicians for one flat monthly price, and no tenant data leaves your network.

ET Ducky

AI-powered kernel-level diagnostics for Windows and Linux