What is Dynacop?

Dynacop is a Windows sign-in security product. It does two things:

1. Login MFA — it adds a second factor (a code from any standard authenticator app) to Windows console and RDP sign-ins. Even if a password is stolen, it isn’t enough to sign in.
2. Shield — it watches failed sign-ins, correlates them by source IP, and automatically blocks attacking IPs in the machine’s Windows Firewall (RDP and SSH brute-force).

Both run from a single lightweight agent on each Windows machine, managed from a cloud panel. No Active Directory is required — Dynacop works with local and domain accounts.

What makes it different

• A person is not a Windows account. Several people can share one Administrator account; Dynacop still records the real person behind each sign-in. See Person ≠ Account.
• MFA and attack blocking in one product. A brute-force blocker bans noisy IPs but never verifies identity; MFA verifies identity but doesn’t reduce noise. Dynacop does both.
• Simple. The whole product rests on three ideas: Resource, Person, Access.

What it does on a machine

The agent adds a credential provider to the Windows sign-in screen (console, lock, and RDP), runs Shield locally, and reports lightweight inventory (OS, IPs, listening ports, firewall state) to the panel over a signed heartbeat. Decisions like Shield blocking work locally, so they keep working even when the machine is briefly offline.

What it is not

Dynacop is not a VPN or a network-access product. It secures the Windows sign-in itself. You can run it alongside a VPN, RD Gateway, or IP allowlist — those control who can reach the machine, while Dynacop verifies who signs in.

Next: Quick start.