Control Plane
Axora PoP
Point of Presence — Central Control Plane
Your security operations centre. Define policies once and deploy them to every Edge site in minutes — with centralized monitoring, fleet management and tamper-proof cryptographic signing.
What Axora PoP does.
Axora Edge is the security guard at each of your building entrances. Axora PoP is the security operations centre where you monitor all guards and update their instructions.
PoP is the central control plane that manages policy distribution, stores configuration state and provides the API that Edge appliances communicate with. Policies are cryptographically signed with Ed25519 before deployment, ensuring tamper-proof delivery even if a network link is compromised.
Capabilities
Command your entire fleet.
Policy Management
Create, publish and deploy security policies across your entire Edge fleet. Ed25519-signed payloads ensure tamper-proof delivery — define a rule once, deploy to every site in minutes.
Fleet Monitoring & Observability
Real-time health, uptime and telemetry for every Edge appliance. Map view, searchable device tables and fleet-wide threat dashboards in one console.
Enrollment & Provisioning
Generate enrollment tokens, auto-register new Edge appliances and sync policies on first connect. QR-code enrollment for plug-and-play deployment.
Multi-Tenant Management
Manage multiple organizations, sites and customer networks from a single PoP instance. Purpose-built for managed security service providers and multi-site enterprises.
Cryptographic Policy Signing
AXLV2 signed tokens with Ed25519 keypairs ensure policies cannot be tampered with in transit. Edge appliances verify signatures before applying any configuration change.
Zero-Downtime Upgrades
Roll out firmware and policy updates across your fleet with automatic rollback on failure. Active-active clustering for PoP high availability.
Why it matters.
- One dashboard for every Edge appliance, everywhere
- Tamper-proof policy deployment with Ed25519 signatures
- Multi-tenant for managed service providers
- Auto-enrollment — plug in, receive policy, start protecting
- Fleet-wide threat visibility and analytics
- Self-hosted or cloud-hosted — runs as a Docker Compose stack
Architecture
Edge + PoP + Console.
Axora Edge
Security appliance at each site. Handles packet processing, firewall, DNS, VPN and IDS/IPS locally.
Axora PoP
Central control plane. Manages policy, stores configuration state and provides the API for fleet orchestration.
Axora Console
Web management interface. Configure policies, monitor fleet, view analytics and manage users from one screen.
Axora CA
Certificate authority for mTLS. Issues and manages certificates for mutual authentication across your network.
Who it is for
- Multi-site enterprises
- Managed security service providers
- ISPs and carriers
- Government agencies
- Distributed retail and hospitality chains
Deployment
- Self-hosted Docker Compose stack
- Cloud-hosted managed option
- On-premise for air-gapped environments
- Active-active clustering for HA
- Works with all Axora Edge models
Centralize your security operations.
Book a walkthrough and see how Axora PoP gives you fleet-wide visibility, policy control and observability from a single dashboard.
Start a project