Three products for Windows fleets — data protection, software deployment and IT support. Each works on its own; together they share one tenant and one sign-in.
Web filtering, data-loss prevention, USB device control, device compliance and local admin lockdown — enforced on the laptop, on any network, online or off.
What it does → gdeploy Set up every laptopSend installs and uninstalls to managed devices from one console, with every download checked against a recorded hash before it runs.
What it does → gsupport Keep requests in one placeEmployee self-service ticketing on the sign-in your staff already have — no separate account to provision.
What it does →Each layer is independently configurable per tenant, and every one of them keeps working when the endpoint is offline.
Category-based web filtering enforced in a local inspection engine, with a branded block page instead of a dead connection.
Inspects what actually leaves the machine — uploads, webmail, clipboard and removable media — before it goes.
Removable storage is blocked by default, with exceptions granted to people and machines — never to a USB stick's serial number.
Continuous compliance from the endpoint's own reported state, so the console shows what is true rather than what was true at enrolment.
Closes the local-admin gap on laptops with no Active Directory to manage it — without an OS reinstall, and without ever locking anyone out.
Traffic is inspected where it originates. Nothing is routed through a datacentre to be allowed or denied.
A signed MSI installs the service and kernel driver. Silent install, standard management tooling.
Enforcement activates on an authenticated session. A freshly installed agent enforces nothing until someone signs in.
Every policy is Ed25519-signed with anti-rollback. An unsigned or replayed policy is refused.
The driver steers web traffic into the local engine. Decisions are made on the device, in milliseconds.
Network-based filtering only protects traffic that crosses the network you control.
| Endpoint OS | Windows 10 (1607+), Windows 11, Windows Server 2016 / 2019 / 2022 / 2025 — x64 |
|---|---|
| Deployment | Signed MSI. Silent install; deployable with Intune, SCCM, GPO or any standard tool. |
| Enforcement point | Windows Filtering Platform kernel driver plus a local TLS-inspecting engine. |
| Policy integrity | Ed25519 signed envelopes, anti-rollback version pinning, offline cache. |
| Authentication | Email plus one-time code. Multi-device sessions; enforcement is session-gated. |
| Management | Browser console. Multi-tenant, with per-organization policy and role separation. |
| Server | Linux (RHEL / CentOS / Oracle Linux 9) with PostgreSQL, behind your own nginx. |
| Integration | REST API with scoped read or read-write tokens. |
Install, update and remove software on managed devices from one console — including the ones that never come into the office.
Target a managed device from the console; the agent picks the job up on its next poll and reports back.
Every package carries a SHA-256 recorded when it was published. A download that does not match is deleted, not executed.
Every title and version across the fleet, gathered from each device's own inventory — not just what gdeploy pushed.
A helpdesk nobody can log into on day one is a helpdesk nobody uses. Every enrolled employee can raise a ticket the moment it is switched on.
Staff sign in with the work email they already use. No provisioning step before anyone can ask for help.
Run gsecure too and real security events open their own tickets, with the detail already attached.
Support staff see every ticket in the organization, assign them, and keep notes the requester never sees.
Signed MSI installers. Install directly, or push them with Intune, SCCM, GPO or any standard software-distribution tool. Each product has its own agent and installs independently of the other.
Web filtering, DLP, USB control, device compliance and local admin lockdown. Enforcement activates after a user signs in.
Applies install and uninstall actions sent from the console, verifying every download against its recorded hash before it runs.
gsupport needs no agent — your team signs in from a browser.
Register your organization to create a tenant and enrol your first device. Existing administrators can sign in to the console.
GeviSense