XXPS
A controlled credential change. A verified result.
An internal credential-rotation tool combining layered operator authentication, enrolled-device controls, real login verification, and audit records.
Authorized platform operators responsible for controlled server and SFTP credential changes. This is an internal engineering project, not a public password-management service.
The problem worth solving.
Changing a password is not the same as proving the new credential works. Unstructured rotation also risks exposing secrets through command history, logs, or permanent storage.
Provide authorized operators with a repeatable generate–apply–verify process and a one-time credential display, while recording the operation without recording the secret.
What XXPS brings to the work.
Layered operator authentication
Combine a client certificate, CAPTCHA, password, emailed one-time code, and TOTP authentication before access to the protected workflow.
Enrolled-device control
Allow or deny enrolled devices and recheck operator authorization during use, rather than relying solely on a previously established session.
Generate, apply, verify
Perform supported server/SFTP password changes and then attempt real password authentication to verify the result.
A one-time secret handoff
Display the resulting credential once. The tool is designed to avoid retaining credential values in its application database or audit trail.
Constrained privileged execution
Use narrowly scoped, validated privileged operations instead of giving the web application an unrestricted administrative shell.
Visible operational history
Record actor, device, target, action, and outcome for review in the tool’s audit interface.
A connected way to work.
- 01
Authorize
Verify the operator and enrolled device through the required authentication steps.
- 02
Rotate
Generate and apply the new credential through the constrained operation.
- 03
Verify
Test authentication, display the credential once, and retain the non-secret audit record.
Security built around a specific operational task
XXPS addresses a narrow but consequential need: controlled changes to supported server credentials. Its design starts with the operator and device, then limits what the protected workflow can execute. The result is a purpose-built operations tool rather than a general password vault or a broad remote administration console.
Verification is part of completion
A successful password-change command does not establish that the new password can authenticate. XXPS includes a real authentication check in the rotation process. The one-time display follows that verification step, while the audit surface records what was attempted and the outcome without presenting the credential as a stored record.
What this project demonstrates
The work highlights Tony’s ability to connect web application controls to privileged system operations with explicit boundaries. It combines identity, device controls, secret handling, validation, and auditability in one workflow. The showcased scope is supported server/SFTP rotation; this page does not claim a general-purpose credential vault, universal fleet discovery, or automated database credential rotation.
Benevanta
AssetNexa
CountNexa