Four products, three self-hosted plus SaaS Assess

Firewall outages are usually configuration accidents: a rule edited on a live box, NAT tangled through the filter policy, no way back except a restore. SecureGuard treats the whole configuration as one document — validated, rendered into every daemon, applied atomically — so a change is reviewable before it lands and reversible after it does.

What it does

• Policy reads LAN → WAN using named objects, so re-cabling a site isn’t a policy migration
• Preview the rendered diff before you commit — and a confirm window rolls back a change that locks you out
• Every state is an immutable revision, so rollback is an id rather than a restore
• The AI layer proposes changes and can throttle on a reputation score. A human commits. We do not advertise auto-block.

Rollback is an id, not a restore. Every config state is an immutable, content-addressed revision.

Secure Assess is multi-tenant SaaS for PCI readiness and vulnerability assessment. Sign up in the app. We scan systems you authorize. We report and advise. We never attack. External and credentialed views of the same authorized scope. Findings are mapped to PCI DSS 11.3 vulnerability assessment — not 11.4 pentest, and not an official ASV attestation.

What it does

• Scan systems you authorize — external and credentialed views of the same authorized scope
• Findings mapped to PCI DSS 11.3 vulnerability assessment, not 11.4 penetration testing
• We report and advise; we do not patch, remediate, or change the host we scanned

We scan and advise. We never attack.

Office PDF Sign runs on the workstation and pairs with Secure Message. Sign and flatten the document locally, then send it through the gateway you already run. No extra cloud tenant for signing. 1.4.0 for Windows is a free download. Mac is not published — this page does not promise a Mac file.

• Type, date, checkmark and sign, then save a flattened copy
• Edit the document’s own text instead of covering it over
• Prepare fields for someone else to fill and sign
• No account, no telemetry; the only network it uses is the update feed
• No extra tenant; updates from hub.rubixtechnology.com

We were an IT support company for years before we sold software, and we still are one. A support agreement on a Rubix product is written by the same company that writes them for clinical environments — so a customer with a problem reaches engineers who can read the source, not a queue that only escalates.

• Support from the people who wrote the code, under an agreement rather than a best-effort inbox
• Nothing in the critical path of the self-hosted products depends on us being reachable — Message, Guard and Desk run on your own hardware, so your mail, your edge and your desktop sessions keep working regardless
• We can add a feature in weeks because we use our own AI toolchain to build
• Every release held to the standard our clinical customers set

Self-hosted means what you install is yours, on your hardware, under your keys.