The Workspace
One front door for everyone you work with.
Employees, contractors, partners and citizen-facing teams open one Workspace in any browser: private web applications, remote desktops and servers as Secure Sessions, and bookmarks to SaaS applications, all behind your sign-in and your Access Rules.
Per group
Each audience sees only its own catalogue
Finance sees six cards.
apps.organisation.example
- Switch the groupFinance sees six cards, contractors see two, engineering sees five.
- Visibility follows membershipA card appears the moment a person joins a group, and disappears when they leave it.
The person's day
Sign in, see your cards, open, verified
- 1Sign inWith your organisation's identity provider, on a sign-in page in your branding. Attempts are limited and abusive addresses blocked.
- 2See only yoursCategories and navigation zones are resolved per group. Nothing a person cannot open is shown to them.
- 3OpenA private web application opens on your own domain; a server opens as a Secure Session in a tab; a SaaS bookmark opens beside them.
- 4Access verifiedIdentity, device posture, Access Rule and, where required, an attested browser are checked on every request, and every launch is logged.
What goes in it
Three kinds of card, one catalogue
- Protected ServicesPrivate HTTPS applications, plus TLS, TCP and UDP services for non-browser clients, published through the ZERA gateway.
- Secure SessionsWindows desktops, Linux servers and network devices over RDP, SSH, VNC and Telnet, in a browser tab, recorded.
- BookmarksSaaS and public applications placed beside private ones, so the Workspace is the one place to start the day.
- Resource Library and navigation zonesCategories, colours and navigation zones per group; a ministry's e-services beside its internal tools.
Everywhere
Desktop, tablet and phone, in your languages
- Any screenThe Workspace is responsive; Studio previews it as desktop, tablet and phone before anything goes live.
- Arabic and EnglishFull right-to-left layout, more languages per organisation, every visible string translatable, a typeface per script.
- Your domainThe Workspace and every Protected Service on your own domain, certificates issued automatically, wildcard included.
Questions buyers ask
Does the person need to install anything?
No. The Workspace opens in any modern browser. Where a resource requires an attested browser, your administrators deploy the Inlinea extension through managed browser policy.
Can contractors use their own devices?
Yes. That is the point of the agentless path. Browser Security and country or network limits apply to them exactly as your policy says.
What does a person see when access is not approved?
A branded page in your identity that says so, and where to ask. Never a raw error, never a hint of what else exists.