Hybrid Cloud Bridge
Cloud platform with encrypted bridge to your on-prem network
Run OrcaMonitor in the cloud while maintaining a secure, encrypted connection to your on-premises network. A lightweight outbound-only agent bridges your infrastructure to the cloud platform without opening any inbound firewall ports.
Perfect for organizations that need cloud-managed operations but have devices on internal networks. The encrypted secure channel uses peer-to-peer encryption — no proxy, no middleman. Your credentials and raw data stay on your network.
Deployment Steps
Step-by-step guide for this deployment mode
Your cloud instance is provisioned automatically during signup.
Deploy the lightweight OrcaMonitor Agent (single Docker container, <200MB) on a host inside your network.
The agent initiates an outbound-only encrypted connection to your cloud instance. Zero inbound firewall rules.
The agent collects telemetry from your local devices and streams it encrypted to the cloud dashboard.
Cloud AI agents analyze the telemetry, correlate alerts, and generate remediation proposals.
System Requirements
- Active OrcaMonitor cloud subscription
- A Linux host (bare metal or VM) inside your network for the agent
- Outbound HTTPS connectivity (port 443) to the internet
- No inbound firewall changes required
Important Considerations
- End-to-end AES-256 encrypted in transit and at rest on all telemetry
- Outbound-only — nothing exposed to the internet
- Agent auto-updates and self-heals on restart
- Direct Connect add-on available for dedicated VPN tunnel
- Ideal for regulated environments with strict firewall policies
Related Deployment Guides
See every module, pricing tier, and deployment option on the OrcaMonitor overview.