Manual offboarding is a liability that modern enterprises can no longer afford to carry. As organizations scale, the "control gap" between HR termination events and actual technical revocation grows, creating significant security risks and audit failures. Offboarder was built to solve this problem by automating the end-to-end offboarding lifecycle.

Today, we are proud to announce Offboarder 2.0. This major release expands our core mission: Automate access removal. Prove the control worked.: into the critical infrastructure layers that are often missed by traditional IAM tools. By adding support for Local Accounts and Database Accounts, Offboarder 2.0 provides a unified control plane that bridges the gap between cloud-native SaaS and on-premises infrastructure.

The Blind Spots: Why Cloud-Only Offboarding Fails

Most offboarding solutions stop at the directory level (Active Directory or Entra ID) and a handful of SaaS applications. However, sensitive data often lives in databases, and critical operations frequently happen on local servers that are not fully integrated into the central identity provider.

When an employee leaves, their AD account might be disabled, but their local admin login on a Windows server or their direct SQL Server permissions may remain active. These "ghost accounts" are prime targets for lateral movement and internal threats. Offboarder 2.0 eliminates these blind spots by treating infrastructure access as a first-class citizen in the offboarding workflow.

Automated Local Account Removal for Windows & Linux

Offboarder 2.0 introduces deep integration for local operating system accounts. Utilizing our lightweight, secure on-prem agent, the platform can now identify and disable local accounts across Windows and Linux environments.

• Discovery & Mapping: The platform automatically scans managed endpoints to find local accounts that correspond to the departing user.
• Enforced Revocation: Once HR triggers the offboarding event, Offboarder 2.0 removes the user from local groups (such as "Administrators" or "sudoers") and disables the local profile.
• Tamper-Resistant Evidence: Every action is logged with precision, providing the "proof of control" required for SOC 2 and ISO 27001 audits.

Ensuring local access is terminated is no longer a manual task for the server team. It is an automated, high-fidelity security control.

Securing the Data Layer: Database Access Control

Databases are the crown jewels of the organization, yet they are notoriously difficult to manage during employee transitions. Manual scripts and human handoffs lead to orphaned logins and persistent database roles.

Offboarder 2.0 brings automated deprovisioning to SQL Server and other major database platforms. The service can now directly communicate with your database instances to revoke user-level permissions and drop logins the moment an employee departs. This ensures that a terminated developer or analyst cannot use a direct database connection to access sensitive information after their primary network credentials have been cut.

Meet the New Ava: AI-Driven Agentic GRC

The core of Offboarder 2.0 is Ava, our advanced AI agent designed to handle the complexity of identity matching and risk assessment. Ava has evolved to be more proactive, acting as the intelligent layer that ensures no account is left behind.

In version 2.0, Ava utilizes AI in four distinct ways:

1. AI Chat: Administrators can interact with Ava to query the status of any offboarding event or ask for real-time visibility into current access levels.
2. Identity Matching: Ava uses sophisticated logic to correlate identities across different systems: matching "j.smith" in AD to "john.smith" in a SQL database or a local Linux server.
3. Contractor Risk Assessment: Ava flags high-risk departures, such as contractors with access to sensitive infrastructure, ensuring their offboarding is prioritized and double-verified.
4. Manager Notices: Ava automates the communication loop, notifying managers of completed removals and alerting them if manual intervention is required for legacy systems.

Ava doesn't just follow a script; she understands the context of the identity, reducing the operational burden on IT and security teams.

A Unified Control Plane for Compliance

Compliance is not about "doing" the work; it is about proving the work was done correctly and consistently. Offboarder 2.0 is designed to generate audit-ready evidence for every single offboarding event.

By centralizing access removal across SaaS, Directories, Local OS, and Databases, the platform provides a single source of truth for internal and external auditors. There is no need to hunt for screenshots or manual logs from multiple team leads. The dashboard provides a clear, high-contrast visualization of every revoked entitlement and disabled account.

• Consistency: The same rigorous process is applied to every employee, every time.
• Speed: Access is revoked in minutes, not days, significantly reducing the window of vulnerability.
• Proof: Every action generates a tamper-resistant audit trail that satisfies even the most stringent regulatory requirements.

Organizations must move away from "best effort" offboarding and toward "guaranteed" offboarding.

Closing the Control Gap

The transition to Offboarder 2.0 represents a significant leap forward in automated user deprovisioning. By extending controls to the infrastructure layer and leveraging Ava’s AI capabilities, we have eliminated the manual handoffs that previously plagued the offboarding process.

Whether you are managing a small team or a global enterprise of 5,000+ employees, the need for real-time visibility and automated enforcement is the same. Security-conscious organizations should evaluate their current IAM tool comparison and look for a solution that handles the "last mile" of local and database access.

Take Control of Your Offboarding Today

Offboarder 2.0 is now available for all customers. If you are ready to eliminate the risk of ghost accounts and automate your compliance evidence, it is time to upgrade your offboarding strategy.

• Learn more about Ava and her AI capabilities.
• Read why local account removal matters for your next audit.
• Ready to see 2.0 in action? Contact our team for a demo.

Automating the removal of logical access is no longer just an IT task; it is a foundational pillar of modern governance and risk management. With Offboarder 2.0, that pillar is stronger than ever.