01
Dual-environment isolation
The normal environment handles daily affairs, and the secure workspace hosts sensitive business. The two environments are isolated from each other, and access is controlled by enterprise authorization policies.
Endpoint security and remote management platform
One computer. Two worlds.One platform to control every endpoint
SWZ Watcher integrates dual environment isolation, global remote control, screen wall, remote file and camera management, sensitive operation auditing and emergency lock control on the same platform.
核心能力
Dual-environment isolationGlobal remote managementScreen wall and recordingOne-click lockdown
守望控制中心全部终端 128实时屏幕墙 · 研发中心概念演示
事件与处置轨迹当前终端 FIN-008
- 发现异常文件操作
- 定位设备 FIN-008
- 执行受控锁定
- 审计记录已归档
THREE CORE PILLARS三项核心能力，
三项核心能力，
形成终端管理闭环
先隔离敏感工作环境，再连接全球终端，并在风险发生时快速锁控。保护、管理与处置不再分散在多套工具中。
02
Global remote management
Manage terminals distributed in different locations through computers, mobile phones, tablets or the Web, and centrally complete viewing, assistance, file and policy operations.
03
Emergency locking
When equipment is lost, personnel leave, or there is a risk of leakage, you can remotely lock, shut down, or perform controlled data disposal, and keep complete audit records.
RISK SURFACE企业数据风险，
企业数据风险，
不只发生在网络边界
终端离开办公地点、文件异常操作、人员变化和管理权限越界，都可能让敏感数据失去控制。SWZ 从工作环境本身建立保护、可见性和处置能力。
Sensitive data leaves controlled boundaries
After the computer is lost or taken away, or the storage hardware is removed from the authorized environment, it is difficult to cover all data risks by relying solely on the login password.
Employee terminals are scattered and difficult to manage
Headquarters, branches, stores, and outbound teams operate across regions, and there is a lack of unified vision for equipment status, desktop screens, and policy execution.
Abnormal operations lack on-site records
Sensitive file moves, illegal operations, and abnormal conversations are often difficult to accurately review afterwards without recording and context.
Insufficient emergency response speed
When equipment is stolen, personnel leave, or secrets are suspected of leaking, if batch locking and remote disposal are not possible, the risk window will continue to expand.
GLOBAL TERMINAL CONTROL不受地点限制，
不受地点限制，
统一管理所有工作终端
管理员可通过电脑、手机、平板或 Web 进入统一管理平台，查看设备状态、发起远控、处理文件、审批操作并执行紧急锁控。
管理员可以通过电脑、手机、平板或 Web 查看状态、发起远控、处理文件和执行紧急锁控。
电脑手机平板Web
总部 · 受保护华东分部 · 在线海外团队 · 已连接
ONE CONTROL PLANE从数据环境到事件处置，
从数据环境到事件处置，
形成完整保护链路
不是把零散工具简单叠加，而是围绕企业工作终端，把双环境、屏幕墙、弱网远控、文件与摄像头管理、录像审计和紧急处置放进同一套权限体系。
01DUAL ENVIRONMENT
General environment and safe work space
One computer hosts two mutually isolated usage environments, allowing for clear boundaries between daily office work and sensitive business.
- Supports separate environment authorization for unified entrance, or dual-environment mode that defaults to the normal environment.
- The secure workspace is only open to authorized personnel, and the specific entry method is not displayed on the public page.
- Work data is continuously protected and the device or storage hardware remains unreadable when removed from the authorized environment.
双环境隔离公开概念演示
承载日常办公与一般操作
- 默认日常使用
- 基础办公与网络访问
- 不直接呈现敏感业务数据
安全工作空间仅向获得授权的人员开放
- 敏感业务工作
- 数据持续处于保护状态
- 权限、策略与审计联动
具体进入方式与实现细节仅在正式授权交付中说明
02GLOBAL CONTROL
Global Terminal Management and Screen Wall
View cross-regional terminals from one management portal, and complete preview, carousel, recording and disposal according to organization, grouping and risk status.
- Supports PC, mobile phone, tablet and web management portal.
- 4×4 screen wall displays multiple desktops in a centralized manner, and can also be filtered by department and risk status.
- Enter a single terminal from the screen preview and continue to perform remote control, file or audit operations.
实时预览轮播巡检分组筛选录像留痕
03REMOTE OPERATIONS
Weak network remote control, file and camera management
Self-developed remote desktop capabilities take into account low latency and weak network experience, and incorporate file and camera operations into the same permission system.
- Authorized viewing and control of remote terminals, supporting common multi-screen, clipboard and file collaboration.
- Browse, upload, download, distribute, collect and delete files within the scope of authorization.
- Camera viewing and recording are independently authorized, and the operating subject, time and object are recorded.
安全工作空间DEV-021 · 研发中心远程文件管理授权目录 · DEV-021
- 项目资料12 项
- 研发文档28 项
- build-notes.txt18 KB
- release-package.zip246 MB
上传、下载、分发与删除操作均被记录
摄像头查看与录制需要独立权限，并应完成制度公示、人员告知与必要授权。
会话审计当前连接记录
- 远程会话已建立
- 管理员通过权限校验
- 打开授权文件目录
- 录像策略保持启用
管理员操作全程留痕
04AUDIT & RESPONSE
Video audit and one-key lock control
Form a configurable and traceable emergency response link from anomaly discovery to batch locking, data processing and review archiving.
- Supports real-time, continuous, carousel or policy-triggered desktop recording.
- Supports single or batch execution of lock, shutdown, restart and controlled data processing.
- Approval can be configured for key operations, and administrator actions will also be traced throughout the process.
Risk incident response pathFrom detection to review
- 01
Detect anomaly
Policy or watchdog identifies risks and retains necessary context.
- 02
Locate endpoint
Quickly locate targets by organization, device and online status.
- 03
Apply lockdown
Lock, shut down or dispose of data after permission verification or approval.
- 04
Review audit trail
Record the operation subject, object, time, cause and result.
Tiered permissionsCritical-action approvalComplete audit trail
DEPLOY YOUR WAY适配不同组织边界的
适配不同组织边界的
五种部署方式
无论快速启用、完全私有、隔离网络还是跨地域混合架构，都可以围绕现有网络、安全制度和管理规模进行规划。
SaaS
Quick activation and unified maintenance by the service platform.
Private deployment
Deployed within enterprise-owned infrastructure and security perimeter.
LAN offline
Adapt to independent office networks isolated from the public network.
Hybrid deployment
Flexible combination by organization, region and data level.
Dedicated hosting
Independent resources and dedicated operation and maintenance boundaries.
实际部署架构、网络依赖与运维边界以正式技术方案为准。
SOLUTION FIT不同于单一工具，
不同于单一工具，
SWZ 连接完整控制链路
传统云桌面、普通远控、DLP 和磁盘加密各有侧重。SWZ 更关注本机工作体验、设备失控保护、全球管理与事件处置的协同。
| Comparison dimension | SWZ Terminal Security and Remote Management | Traditional cloud desktop/VDI | Normal remote control | DLP / Endpoint Security | Single disk encryption |
|---|---|---|---|---|---|
| Main work computing power | Terminal native | Data center or cloud hosting | Terminal native | Terminal native | Terminal native |
| Local usage experience | Close to native working environment | Affected by network and host resources | Native system | Native system | Native system |
| Dual-environment isolation | Native integration | Usually not involved | Usually not available | Usually not available | Usually not available |
| Device out-of-control data protection | Core capabilities | Usually relies on data failure and access control | Usually not a core competency | Depends on product capabilities | One of the core competencies |
| Global multi-terminal management | Full integration | usually has | Partial connection management | usually has | Usually not available |
| Screen wall and carousel | Native integration | Platform or extension dependent | Some products have | Usually not a core competency | Not available |
QUESTIONS, ANSWERED开始了解 SWZ 前，
开始了解 SWZ 前，
您可能关心这些问题
关于使用体验、双环境、安全边界、管理员权限和部署方式，我们先给出清晰、不过度承诺的说明。
01What is SWZ Watcher?
SWZ Watcher is a terminal security and remote management platform. It integrates dual-environment isolation, global multi-terminal management, screen wall, weak network remote desktop, file and camera management, desktop recording, one-click lock control and auditing capabilities on the same platform.
Product Basics02Which companies and positions is SWZ suitable for?
Suitable for organizations that need to protect executive, financial, R&D, legal, design and customer data. It is also suitable for IT operations, chain stores, branches, expatriate teams and customers with requirements for privatization or offline deployment.
Product Basics03Is there a limit to the number of managed computers?
Product solutions can start with a small number of critical endpoints and scale to large-scale device clusters based on the size of the organization. The official website does not set an upper limit on the number of devices at the promotional level, and the specific capacity and resource planning will be confirmed during deployment communication.
Product Basics04What is the difference between a normal environment and a safe workspace?
A normal environment is used for daily office work, and a secure workspace is used for sensitive business. The two environments are isolated from each other, and the secure workspace is only open to authorized personnel, so that sensitive data is not directly exposed to the general use environment.
Working environment05What usage models are supported in dual environments?
can provide separate environment authorization for a unified entrance according to the delivery plan, or a mode that defaults to a normal environment and allows authorized personnel to enter a safe workspace. Specific access methods and security configurations will only be explained to the appropriate personnel during formal deployment.
Working environment06How to enter the safe workspace?
Enter through the product’s preset authorization method. In order to protect the product security boundary, the official website will not display specific operations, triggering sequences or implementation details. Instructions will be provided to authorized personnel during official delivery.
Working environmentSTART WITH CONTROL
Establish an enterprise’s own secure working environment starting from key terminals
Tell us your device size, network conditions and key scenarios to get product demos and deployment recommendations that fit within your organization's boundaries.