WorkMonitor for IT & Security
Deploy to the whole fleet, then prove where the data went
Agents that roll out without a hand on every laptop, tenant isolation enforced in the database rather than promised in a diagram, and a tamper-evident trail of who saw what.
Free for two seats, no card.
- Rolling an agent out means touching machines you will never see.
- Admin or nothing, so half the company can read the other half.
- A log an insider with admin rights can quietly edit.
IT & Security
What changes for IT and security
Pick a line and the page it happens on opens on the right.
- AKProof LedgerClient-grade proof.Search or ask…
- Proof Ledger
- Outcomes
- Certificates
- Audit log
- Data access
- Disputes
- Data egress
- Export
- What We See
- Controls
Northlight StudioExportData out, and every export auditedNew exportDaily rollupsCSV3 Aug – 2 Sep (UTC)Owner onlyDownload exportEXPORTREQUESTED BYSIZESTATE- Daily rollupsCSV5 Aug – 2 Sep · 1,260 rowsAKAria K.412 KBReady
- Subject data export · Lena M.Subject requestJSONHer whole footprint · 2,140 rowsAKAria K.1.8 MBReady
- Activity samplesConsent-gatedNDJSON19 Aug – 2 Sep · 486,220 rowsAKAria K.68%Running
- TimesheetsCSVWeeks 33–36 · 168 approved rowsJMJon M.46 KBReady
- Data egress · Ravi P.CSVLast 90 days · 74 rowsSDSara D.12 KBExpired
- Daily rollupsCSV1 – 31 Jul · 1,302 rowsAKAria K.430 KBExpired
A finished file is held for 24 hours, then removed — an expired export is requested again, not recovered. No export reaches past the capture retention window.Range capped at 366 daysTaking data out is itself an access event: every export writes an audit entry, and one row per person in it.6 exports in 7 days
- Proof Ledger
- Outcomes
- Certificates
- Audit log
- Data access
- Disputes
- Data egress
- Export
- What We See
- Controls
- Daily rollupsCSV5 Aug – 2 Sep · 1,260 rowsAKAria K.412 KBReady
- Subject data export · Lena M.Subject requestJSONHer whole footprint · 2,140 rowsAKAria K.1.8 MBReady
- Activity samplesConsent-gatedNDJSON19 Aug – 2 Sep · 486,220 rowsAKAria K.68%Running
- TimesheetsCSVWeeks 33–36 · 168 approved rowsJMJon M.46 KBReady
- Data egress · Ravi P.CSVLast 90 days · 74 rowsSDSara D.12 KBExpired
- Daily rollupsCSV1 – 31 Jul · 1,302 rowsAKAria K.430 KBExpired
Rollout
Standing this up without a desk visit
- 1
Enrol the fleet remotely
The enrol → session → ingest protocol plus signed release packaging and an appcast auto-update, so the rollout does not require touching a machine.
- 2
Wire identity to what you already run
Okta, Entra and Google are among the nine connectors; SSO over SAML/OIDC and SCIM v2 provisioning are in beta.
- 3
Scope roles to the org tree
Custom roles bind to a node rather than to the whole tenant, and the scope is enforced on the server against the session rather than against the URL.
- 4
Turn on the signals, then the export
Egress and integrity signals feed the anomaly feed; SIEM export, in beta, carries them into the stack your team already works in.
A tool you have to trust vs. one that proves itself
workmonitor.vsAgent tooling as it usually ships
Rollout
With WorkMonitor
Remote enrolment, signed packaging, and auto-update through an appcast manifest.
Agent tooling as it usually ships
Ship laptops, or talk somebody through an installer on a call.
Tenant isolation
With WorkMonitor
Composite foreign keys make a cross-tenant row a database error, not a code-review question.
Agent tooling as it usually ships
Enforced in application code, which means enforced until somebody forgets.
Access scope
With WorkMonitor
Roles scoped to a node in the org tree, with every access to a person’s data written to a hash chain.
Agent tooling as it usually ships
Admin or nothing, so the blast radius of one compromised login is the whole company.
Tamper evidence
With WorkMonitor
Append-only and hash-linked, so a removal breaks the chain and the break is detectable.
Agent tooling as it usually ships
Deleting rows from a log table leaves no evidence that rows were deleted.
Insider signals
With WorkMonitor
Egress and integrity signals with the surrounding activity attached, and the day reconstruction one click away.
Agent tooling as it usually ships
An alert with a number in it and nothing behind it.
Automation
With WorkMonitor
A typed v1 REST API, scoped keys, OpenAPI spec and HMAC-signed partner webhooks.
Agent tooling as it usually ships
A CSV export and a scheduled job somebody wrote once.
- Today
- Insights
- Activity board
- Live screens
- Team
- Agents
- Integrity
- App categories
- Reports & digests
- Capacity
- BlurredAria K.
- BlurredJon M.
- BlurredSara D.
- BlurredRavi P.
- UnavailableLena M.
- OfflineTomas V.
What IT and security get to work with
- Enroll→session→ingest protocol
- Device enrollment & pipeline
- Agent auto-update (appcast/Sparkle, signed manifest)
- Signed release & packagingBeta
Ask AI
Ask AI about your fleet
Answers drawn from the device inventory, the access log and the anomaly feed.
Pick a question above and WorkMonitor AI will answer from your team's real numbers.
- Today
- Insights
- Activity board
- Live screens
- Team
- Agents
- Integrity
- App categories
- Reports & digests
- Capacity
- AKAria K.Figma92Active
- JMJon M.Terminal78Active
- SDSara D.Slack61Active
- RPRavi P.Notion34Idle 11m
- LMLena M.Teams55In a call
- TVTomas V.Off shift0Off
The status meeting, already written
Status is normally assembled by asking. Here it is already: hours, activity, attendance and risk on one board, for one person or the whole company. Set the thresholds once and it tells you who needs you.
Jobs to be done
The jobs a security team runs here
- Catch insider threats earlyEgress signals, anomaly detection and integrity checks on a hash-chained trail that records the investigators too, so the finding survives being examined.
- Monitor apps & websitesEvery app and site classified, every day replayable as a timeline. You see which tools are eating the week and which teams they are fragmenting.
- Monitor legally & stay compliantVersioned consent, a capture scope that cannot quietly widen, retention and DSAR handling, and written guidance for 32 jurisdictions before you roll out in one.
- Catch anomalies with smart alertsAnomaly detection against your own baseline, six named agents on specific jobs, evidence-cited summaries, and delivery to a channel your team already reads.
Straight answers
The questions we would ask in your position
Every answer here is the one you would get on a call. Open as many as you like; they stay open, so two can be held side by side.
Active application and window titles, input activity as a signal rather than keystrokes, and screenshots when your capture policy asks for them. Per-app privacy deny-lists stop named applications entering the record at all, and the agent applies those rules on the device, before anything is transmitted.
Isolation is enforced at the schema level: composite (id, orgId) foreign keys mean a record cannot be joined across organisations even if application code asks for it. On top of that, 310 server-side checks confirm a record belongs to your organisation before it is returned, and the scope comes from the credential rather than from the request path.
Yes, and it is the default posture rather than an add-on. Roles are scoped to a node in the org tree, so a team lead sees their team and a regional manager sees their region. Access itself is recorded, so "who looked at this" has an answer.
macOS is live, along with a VS Code companion. Windows, Linux and a browser extension are in beta, and a mobile app for deskless teams is planned. The product pages carry the current status for each, nothing here is listed as shipped before it is.
Nearby
Teams with the same problem, from another angle
Take these with you
The software is the easy part of a rollout
Here is what we would send a manager doing one for the first time: how to read a productivity number, what to say to a remote team before anything is installed, and a policy you can adopt as written.
Point it at one team for a week.
Create the account, put the agent on a handful of desks, and leave it alone. On Friday you read the week instead of reconstructing it: hours against their projects, focus and idle per person, and the timesheets already filled in.
Free for two seats. No card, and no sales call to sit through.