Operations · Audit

Every SSH session, recorded and searchable.

Built-in terminal recording and command history for every SSH session through Klyroo — the audit trail teams usually stand up a separate tool like Teleport or StrongDM to get, included by default.

Book a demo ← Back to platform overview

0separate tools required

30supload chunks — no big-file loss risk

100%of sessions searchable by command

What Gets Captured

Full playback, indexed and searchable.

Every SSH session through Klyroo's terminal is recorded as video and logged as a searchable command index — indexed by server, user, and time. "Who ran that command" becomes a search, not an investigation.

● REC — session started by ops@team, 09:12:04

root@db-replica-2:~# systemctl restart postgresql
root@db-replica-2:~# tail -f /var/log/postgresql/postgresql.log
root@db-replica-2:~# df -h
— searchable: "systemctl restart postgresql" · 1 match, this session —

Reliability

Recordings upload as they happen, not after.

Recording is chunked, not buffered whole

Video is uploaded incrementally in roughly 30-second chunks throughout the session, instead of holding the entire recording in memory and shipping one large file at the end.

A dropped connection doesn't cost the whole session

Because most of the recording has already been uploaded chunk by chunk, a network drop or an abruptly closed session only risks the last few seconds — not the whole thing.

An unfinished session is salvaged, not discarded

In an audit tool, a partial recording is still evidence. If a session ends without a clean finalize signal, the chunks already received are preserved and marked partial rather than silently deleted.

An orphan sweep catches the rest

A background sweep periodically checks for sessions that went stale without ever finalizing, and salvages whatever was captured — so nothing sits in limbo indefinitely.

Where We Stand

Scope, honestly.

What's covered

Full-session video playback for every SSH session through Klyroo
Searchable command index by server, user, and time
Chunked, incremental upload — long sessions don't risk total loss on a dropped connection
Partial recordings are preserved and marked, never silently discarded

What it isn't

A lightweight, purpose-built recorder for the SSH audit-trail use case — not a full session-broker with a policy engine, approval workflows for access itself, or protocol proxying beyond SSH
Positioned as "built in, no extra tool" rather than a feature-for-feature replacement of dedicated products like Teleport or StrongDM

Pairs Well With

Related capabilities

Get the audit trail without a separate tool.

SSH in through Klyroo and see the recording and command index land immediately.

Book a 20-minute demo