Comprehensive analysis system Revit Server Guard

Security and structured data management in Revit Server have long remained a critical weakness for design organisations using Building Information Modelling (BIM). Autodesk’s standard solution, although effective for collaborative model work on local networks and through remote connections, originally lacked advanced administration tools, granular access control and deep operational auditing. In this context, Revit Server Guard (RSG) represents a shift from ad hoc server-infrastructure management to a formalized, protected and controlled operating model. This study provides a detailed review of RSG functionality, analyses its position among comparable global solutions and evaluates the economic aspects of deploying and owning the system under modern information-security requirements.

Architectural and technical foundation of Revit Server Guard

RSG is a multi-component administrative module designed to work with Revit Server versions 2021 through 2027. Its architecture separates presentation, business logic and access-policy enforcement. Unlike superficial add-ons, RSG is inserted directly into the data-exchange path between the Revit client and server, allowing it not only to monitor but also to actively control traffic.

The central system component is the RSG Admin Panel, built with modern web technologies such as React and Vite. This provides a responsive interface, cross-browser support and centralized management of distributed server infrastructure from a single point. The backend, RSG.API, runs on .NET 8 and is deployed as a Windows service, providing the performance and stability required for real-time request processing.

For data persistence and configuration storage, the system uses lightweight SQLite databases (rsg.db and rsg-proxy.db). This format minimises DBMS administration overhead while providing sufficient read/write performance for audit and permission checks. The key system components and their technical roles are shown in the following table.

The RSG.NetTcpProxy module deserves special attention. Because Revit Server uses the net.tcp protocol for model synchronization, ordinary web filters cannot control this data exchange. The RSG proxy acts as a “transparent” gateway: it analyses SOAP message headers, extracts user and machine identifiers, and matches them against the active access policy in the database. If an operation — for example, synchronising with the central model — is not permitted for that role in a specific project section, the proxy blocks the transfer and prevents potential corruption or unauthorised modification of information.

Analysis of analogs and the competitive environment in BIM administration

The market for Revit infrastructure-management tools can be divided into several categories: deep-automation systems, cloud project managers and specialized alternative platforms. The analysis shows that RSG occupies a distinct niche focused specifically on the security and protection of on-premises servers.

Infrastructure automation: IMAGINiT Clarity

One of the most prominent products in this market is IMAGINiT Clarity. It is positioned as a powerful platform for automating tasks in Revit and Revit Server. Clarity focuses on productivity through automated data export, model-health checks and report generation. Unlike RSG, which emphasises access-right segregation through traffic proxying, Clarity is more focused on downstream data processing.

According to the technical documentation, Clarity can automate the creation of PDF, DWG, Navisworks and IFC files and run Dynamo scripts in batches. For security, Clarity offers a Security module, but its operation is typically limited to folder-level permission management and Active Directory integration, whereas RSG provides more granular control at the documentation-section (discipline) level within a project.

Cloud management: Naviate (formerly BIMrx) Cloud Manager

Another notable alternative is Naviate Cloud Manager (formerly BIMrx Cloud Manager), developed by Microdesk (now part of Symetri). The product is designed to manage Autodesk Construction Cloud (ACC) and BIM 360 environments. Its key functions include accelerated project setup, participant management and automated data upload/download.

Analysis of Naviate Cloud Manager shows that it solves tasks similar to RSG, but in a cloud environment. For example, it enforces administrative security when creating projects and managing users by limiting access through Account Admin and Project Admin levels. However, for organisations that must keep data on their own servers because of legal or corporate requirements, cloud managers cannot serve as a direct replacement for RSG.

Specialized alternatives and SaaS solution

The Russian market also includes RSNBIM, which offers Revit Server as a cloud service (SaaS). RSNBIM provides a ready-made web panel for managing users and projects and includes plugins for monitoring designer activity. This removes the need to maintain local hardware, but, as with ACC, moves data into an external environment.

The following table compares RSG with key alternatives by functional capability.

Economic parameters: pricing and distribution terms

Calculating the total cost of ownership of RSG requires analysing both direct licensing costs and the indirect benefits of reduced risk. According to market data, RSG is offered under annual or three-year subscription models, which is standard for modern engineering software.

Cost licenses and struktura zatrat

On osnove accessnoy informatsii o pricekh on spetsializirovannoe BIM-soprovozhdenie, mozhno vydelit sleduyuschie tsenovye category for RSG.

For comparison, a basic Autodesk Revit subscription costs an organisation approximately $3,005 per year (about 290,000–300,000 RUB). The cost of implementing the RSG control layer is therefore approximately 40% of one Revit licence, while RSG protects the data of the entire project team working on the server. This indicates high economic efficiency when the solution is scaled across large departments.

Distribution and delivery terms

The product is delivered electronically, minimising logistics costs and reducing deployment time. A typical order is prepared within 2–3 business days. The software supports Russian and English interfaces, expanding its use in international design consortia.

RSG licensing is closely integrated with the admin panel. The configuration section includes tools for activation, renewal and licence-status monitoring. The system tracks the number of active users and Revit Server versions covered by protection. Importantly, the solution supports multiple versions: one RSG installation can serve projects created in different Revit versions from 2021 through 2027, eliminating the need to purchase a separate licence for each server version.

Detailed analysis of functional modulees and the user interface

RSG’s effectiveness as an administration tool depends heavily on the quality of its user interface and data-management logic. The system includes 10 key functional areas, each addressing specific BIM-management tasks.

Global monitoring and consolidated access analytics

Page «overview» predstavlyaet soboy tsentralnyy pult management, gde akkumuliruetsya informatsiya o svyazyakh mezhdu useryami, projectami and rolyami. Integratsiya PivotTable (svodnoy tablitsy) and PivotTree (dereva) allows administratoru mgnovenno pereklyuchatsya mezhdu razlichnymi predstavleniyami data: ot ploskogo spiska naznacheniy until ierarkhicheskoy struktury organizatsii.

The use of localization contexts (I18nContext) and country scopes (CountryScopeContext) in the interface demonstrates that the product architecture is designed for large holdings. Roles and sections can be filtered according to regional design standards without creating fragmented databases. This approach reduces the administrator’s cognitive load and lowers the risk of incorrect permission assignments in complex, multi-level projects.

Reestr identichnostey and management useryami

The “Users” module in RSG goes beyond a simple list of names. The system implements trusted binding by linking a user login to a specific machine (Computer Name) and IP address. This is a critical security layer that prevents access with stolen credentials from unauthorised devices.

The interface includes statistics cards that clearly show licence consumption and account activity. Importing and exporting the user database in JSON/Excel simplifies data migration and integration with external HR systems. Connection history enables rapid investigation of technical conflicts or security incidents.

Management projectami and distsiplinarnoe razdelenie

The “Projects” section synchronises the local RSG database with the actual contents of Revit Server. One of its most important features is SectionFolderBinding, which maps project folders to design-documentation sections (for example, AR, KR and IOS).

In traditsionnom Revit Server rights vydayutsya on project tselikom. RSG lomaet etu paradigmu, pozvolyaya BIM-menedzheru naznachit, naprimer, spetsialistu by ventilyatsii rights on zapis only in papku «03_OV», when etom ostavlyaya ostalnye chasti projecta accessnymi only for chteniya or polnostyu skrytymi. This ne only povyshaet security, no and distsipliniruet protsess projectirovaniya, isklyuchaya sluchaynye changes in smezhnykh razdelakh.

Role model and permissions matrix

The RSG role matrix is a fine-grained access-control tool. Each role represents a set of read or write permissions for specific disciplines. The matrix interface provides a visual overview of access levels, with roles in rows and sections in columns.

The system supports built-in roles (for example, Administrator and Project Admin) for basic operation and allows an unlimited number of custom roles. Role copying speeds up permission scaling when new participant types appear. Before changes are saved, the system calculates the “Impact” — the number of users and projects affected — providing an important safeguard against widespread access failures.

Tekhnicheskaya ekspluatatsiya: Shlyuzy, proksi and setevaya security

A critical RSG component that actually enforces access rights is the proxy-gateway system. Without this layer, any management panel remains only a visualisation tool and cannot physically stop an unauthorised request.

Konfiguratsiya network circuits and portov

Correct port configuration is essential for stable RSG operation. The system requires clear separation of administrative, user and service traffic.

With this configuration, the user specifies the proxy-server address and port 808 in Revit settings. The proxy accepts the request, checks it through the Decision API and, if approved, forwards it to port 8086 of the actual Revit Server. This creates a physical barrier that cannot be bypassed without direct server access at the operating-system administrator level.

Diagnostika and zhivuchest system

The “RS Gateways” interface provides tools for monitoring proxy-process status. The “Detect” function checks the availability of all required Revit Server endpoints before protection is enabled. The system also includes proxy-traffic logging that shows unknown-user access attempts or authorisation failures in real time.

An important aspect is proxy operation in “Bypass” mode. If the licence does not cover a particular Revit Server version or technical problems occur with the permissions database, the proxy can allow traffic through without filtering so that the organisation is not completely blocked. This mode is logged in detail, and the administrator is notified that the protection level has been reduced.

Infrastructure maintenance: backups, audit and analytics

In addition to protection functions, RSG helps maintain data integrity and analyse workflow efficiency.

Rezervnoe kopirovanie projectov

The “Backups” module in RSG automates creation of archive copies of models. Unlike standard file-copying tools, RSG understands the Revit Server project structure.

• Gibkost raspisaniya: For kazhdogo projecta mozhno zadat individualnyy grafik (naprimer, ezhednevnoe kopirovanie in 2:00).
• Incremental backups: support for incremental copying saves significant server space by storing only changed parts of the model.
• Status and history: Panel monitoringa pokazyvaet uspeshnost poslednikh launchov, chto allows vovremya zametit problemy with diskovym prostranstvom or accessom k setevym khranilischam.

Glubokiy audit and Live-monitoring

The RSG audit log is the system’s “black box”. It records every significant event: project creation, user-role changes, and successful or blocked synchronization attempts.

• Live stream: the administrator can monitor server activity in real time. This is an invaluable tool when troubleshooting access problems.
• Report export: the system can export audit data to PDF and XLSX for security teams or company management.
• Action analytics: the “Object type” and “Details” columns make it easy to filter, for example, all cases of model deletion or administrator-permission changes.

Statistika and prinyatie resheniy on osnove data

The statistics module visualises activity in the BIM environment. Charts showing actions by project and role help identify which objects are active and which are stagnant.

• Activity leaders: lists of the most active users help identify overloaded employees or, conversely, users who are not working with the central model as expected.
• Export for BIM managers: specialized reports on model activity for a specific project help analyse synchronization frequency and identify potential risks of model-file bloat.

Comparison ekonomicheskikh models vladeniya: RSG vs Oblachnye solution

The choice between RSG (based on an on-premises Revit Server) and cloud solutions such as Autodesk Construction Cloud (ACC) often comes down to total cost of ownership (TCO).

For projectnoy organizatsii so shtatom in 50 projectirovschikov:

• Oblako (ACC): 50 users * 90,000 rub. = 4,500,000 rub. in year.
• Locally (RS + RSG): license RSG 120,000 rub. + amortizatsiya server + FOT IT-administratora (uslovno 1,000,000 rub.) = ~1,120,000 rub. in year.

Economic analysis confirms that for medium and large companies RSG can be a strong budget-optimization tool, maintaining high security standards at a fraction of the software cost. At the same time, RSG addresses the main weakness of an on-premises Revit Server — the lack of access control — making it functionally comparable with expensive cloud platforms.

Strategicheskiy vzglyad on razvitie and vnedrenie system

Deploying Revit Server Guard in a design organisation’s IT landscape is not merely software installation; it is a process of formalising working rules. Based on the documentation, several stages of system maturity within a company can be identified.

1. Inventory and normalisation: at the first stage, RSG is used to organise Revit Server catalogs. Refreshing catalogs and importing projects reveals the actual server workload.
2. Protection and segregation: at the second stage, the role model is introduced. Mapping folders to documentation sections (SectionFolderBinding) assigns responsibility to specific performers. Starting the proxy server switches the system into active protection mode.
3. Analytics and optimization: at the third stage, audit and statistics data are used to optimise processes. Management receives an evidence base for decisions about expanding staff or upgrading server hardware.

Technical support for multiple versions (2021–2027) protects investment in RSG from frequent Autodesk product updates. This is especially important when different clients require work in different Revit versions and an organisation must maintain a complex fleet of servers.

In summary, Revit Server Guard can be considered an essential step in the evolution of BIM-based design firms. It turns the “black box” of Revit Server into a transparent, manageable and secure environment, giving administrators control tools and management confidence that the company’s intellectual property is protected. Compared with global alternatives, RSG stands out for its focus on network-traffic protection and deep integration with discipline/section-based design workflows, while remaining competitive in price and operating conditions.