Hi,
I think I understand what you are asking for. Let me divide it in three parts which you can comment on:
1) End user explicit connection approval. Even in cases of unattended access with successful authentication from a technician, there would be a prompt that the end user would have to accept to allow the connection to take place.
The closest to #1 that we have is the Prompt For Permission (PFP) authentication type that requires no password, but always requests explicit user consent for the connection. We have it on our backlog to add a variant of PFP that would happen at all times, which can be useful for cases where the end user should always give explicit consent even when a trusted technician connects through unattended access.
2) Keeping an audit trace for all sessions: who connected to what machine, at what time and for how long.
This is an important feature available in the Wayk Den on-premises that we will keep on improving. You can see a screenshot of the "session" view at the very end of Wayk Den getting started guide: https://github.com/Devolutions/WaykDen-ps/blob/master/docs/getting-started-argo.adoc
This view shows both current and past sessions, but we will be improving what is shown for the next release. There is some relevant information currently not displayed in that screenshot that we will add, such as the target machine name, etc.
3) Inspecting and keeping a trace of actions done during a session, with session recording or with action-specific logs.
Wayk Now Enterprise has client-side session recording, and we are planning on adding a form of proxy-based session recording feature to Wayk Den Enterprise later this year. Action-specific logs would come after we have completed an initial version of proxy-based session recording through Wayk Now traffic inspection at the proxy level. We could log operations like file transfers, remote execution, etc.
Both the audit trace and the proxy-based session recording features will be limited to private Wayk Den deployments isolated from the "public" Wayk Den deployment. However, we are working towards making such features available at some point in the public Wayk Den, but not before they have made their way into the Wayk Den on-premises product.
Let me know what you think, and if I have captured your needs correctly.
Best regards,
Marc-André Moreau