Skip to main content

Overview

SessionGuardian makes sure only authorized users can view and access sensitive data. It also stops users from copying, downloading, screen capturing, or photographing that data.

SessionGuardian is available as:

  • SessionGuardian Desktop on Windows devices

  • SessionGuardian VDI in VDI environments

Continuous identity assurance

Animation: SessionGuardian recognizes the authorized user at the computer and shows a green check mark. When a second person looks over the user's shoulder, SessionGuardian flags that person with a red X.

SessionGuardian confirms throughout the session that the authorized user is the one viewing protected data. It provides:

  • Continuous facial authentication

  • User presence and liveness detection

  • Prevention of shoulder surfing

  • ID verification and validation

Continuous data protection

Animation: a user at a laptop tries to capture the screen, press Print Screen, use the Snipping Tool, and photograph the screen with a phone. SessionGuardian blocks each attempt and the screen goes black.

SessionGuardian stops sensitive data from leaving the secure session. It:

  • Prevents screen sharing, screen capture, and screen printing (SessionGuardian VDI and Desktop)

  • Blocks copy and paste and file downloads (SessionGuardian VDI)

  • Detects mobile phones and cameras used to photograph the screen

  • Activates watermarks across all screens during secure sessions

Device and network posture verification

Animation: while a user works at a computer, icons appear for device health, device security, an approved office location, and the time of day as SessionGuardian checks each one.

SessionGuardian checks that the device is healthy and secure, is on a safe network, and is being used at an approved location and time. It:

  • Checks device security

  • Limits access to known and approved networks (enforces IP and VPN restrictions)

  • Allows or denies access by geolocation

  • Verifies that required applications are running and restricted applications are not

  • Limits access to approved times of day and days of the week

In this section: