Only approved applications run
Pick the applications a policy allows. Start in Monitor, where anything else is reported and left running, then switch to Enforce, where it is asked to close and then ended.
NewVersion 0.2.12 is out
The secure workspace for your remote team
VaultDesk keeps work on the applications you approve. Decide what is allowed in the web portal, and the Windows app applies it on every PC: it frames each work window, guards the clipboard and screenshots, and reports back what it sees. Timesheets, leave, IT tickets and your whole team live in the same portal.
Download VaultDesk for Windows
Latest version 0.2.12 · released Nov 12, 2026 · Windows 10 and 11
- 1Open the downloaded file
- 2Approve the prompt once
- 3Sign in with your account
~1 min
for a policy change to reach every PC
3
data controls: clipboard, screenshots and USB drives
0
servers to run, and nothing to open on your network
1 file
to install; every update after that arrives by itself
How VaultDesk fits together
Two halves, one system
A small app on each Windows PC, and a web portal that tells it what to do. You make every decision in the portal; the app carries it out and reports back.
On each PC
The desktop app
- Lets only the applications on your list run
- Frames every approved window in colour
- Guards the clipboard, screenshots and USB drives
- Reports what it sees, as it happens
In your browser
The web portal
- Choose the applications each policy allows
- Put a person on a policy from their VA page
- See every PC: online, protected, up to date
- Run timesheets, leave, tickets and billing
The desktop app
Everything stays inside the lines
VaultDesk runs quietly on each Windows PC. It follows the policy you set for the person signed in, and changes within a minute of you changing it.
Work you can see
Every approved window gets a coloured frame, so it is clear at a glance, and on a screen share, what is work.
Clipboard guard
Something copied at work is cleared before it can be pasted into an application off the list. Copying between work apps is never touched.
Screenshots stopped
Print Screen, Win+Shift+S and the other capture shortcuts can be reported, or blocked outright.
USB drives reported
A USB drive or memory card plugged in while VaultDesk runs is reported to the portal straight away.
Live status for every PC
See which PCs are online, which policy each follows, which version it runs, and whether protection is on right now.
A trail you can audit
Blocked applications, cleared clipboards, policy changes and protection starting or stopping are all recorded in the portal.
The web portal
Run the whole team from one portal
VaultDesk is more than protection. The same portal that sets each PC's policy keeps your team's time, leave, compliance, IT requests and billing, so nothing lives in a spreadsheet on the side.
Time tracking
Clock in and out, timesheets reviewers approve, projects to log time against, and timers that start and stop on a schedule.
Schedules and attendance
Shifts follow your clients' working hours, daylight saving included. Late starts are flagged, and a reviewer can clear a tag.
Leave and PTO
Requests, balances and approvals in one place, with every decision and who made it kept.
Team management
Every VA, the companies they work for, and departments with their headcount and workload.
Live presence
See who is signed in to the desktop app right now, and message or call them there.
Compliance
NBI clearances uploaded, verified and tracked, with renewal reminders emailed before they expire.
IT support
Tickets with categories, SLA targets and escalation, and a dashboard of what is open, pending or overdue.
Billing rates
What each VA is billed at for each client: the current rate, the previous one, and changes scheduled ahead.
Roles and audit
Roles decide which modules and pages each person can open. Invite people by email; every action is in the activity log.
- Clock in and out
- Timesheet review
- Projects
- Scheduled timers
- Late tags
- Leave balances
- Approvals
- Companies
- Departments
- NBI reminders
- Ticket SLAs
- Escalations
- Billing rates
- Roles and modules
- Invitations
- Activity log
- Device policies
- Allowed applications
- Device activity
- Live messaging
Security
Built to be trusted, by design
A tool that guards work has to be careful itself. VaultDesk asks for as little as it can, checks what it installs, and keeps a record of what happens.
Signed and checked
The installer checks every package against its published checksum and signature before anything is installed.
Outbound only
Each PC reaches out to the portal over HTTPS. The portal never reaches in, so there is nothing to open on your network.
Sessions tied to the PC
A desktop sign-in is bound to the PC it was made on, and the portal checks that on every request.
Least privilege
Roles decide which modules and pages each person can open, and what PCs report needs a permission of its own.
One approval, once
VaultDesk installs for one Windows account. Administrator approval is asked once, to trust the VaultDesk certificate.
Always current
New versions download in the background. VaultDesk asks before installing, takes a few seconds, and reopens itself.
How it works
From download to protected in three steps
No servers to run and nothing to open on your network. Each PC reaches out to the portal; the portal never reaches in.
- 1
Install VaultDesk and sign in
On the PC, install VaultDesk and sign in with the same email and password as the portal. That one step connects the PC to your workspace.
- 2
Put people on a protection policy
In the portal, pick the applications a policy allows and assign it to a person from their VA page. Everyone else sees just the workspace.
- 3
Their PCs are protected
The policy arrives within a minute of signing in. Approved apps are framed, everything else follows your rules, and the PC shows up in the portal.
Install
Get VaultDesk on a PC
The first install on a PC takes one file and one click. After that, VaultDesk downloads new versions by itself and asks you to install them.
First install on this PC
Download the installer and open it
- 1Download the installer with the button below.
- 2Open it from your downloads. If Windows asks whether to run it, choose Run.
- 3Approve the administrator prompt. It appears once, to let Windows trust the VaultDesk certificate.
- 4VaultDesk opens. Sign in with your VaultDesk email and password, the same ones you use for the portal.
The installer downloads the newest VaultDesk, checks it against its published checksum and signature, and installs it for your Windows account only. Nothing else on the PC is touched.
Prefer one line in PowerShell?
The same installer, without downloading anything by hand. Open the Start menu, type PowerShell, open it, paste this and press Enter.
PowerShell
irm https://github.com/Quantuvate/vaultdesk-releases/releases/latest/download/Install-VaultDesk.ps1 | iexSeeing “publisher certificate could not be verified”?
That message (error 0x800B010A) means the VaultDesk package was opened on its own. Windows only accepts it after the installer has run once on the PC: the installer trusts the VaultDesk certificate, then installs. Close the message and follow the steps here instead; there is nothing else to download by hand.
What you need
- Windows 10 (version 2004 or later) or Windows 11, 64-bit
- An internet connection, to reach the portal
- Your VaultDesk account, the one you use for the portal
- Administrator approval once, on the first install
Questions
Good to know before you start
The short answers to what people ask most.
Which computers does VaultDesk run on?
Windows 10 (version 2004 or later) and Windows 11, 64-bit. The web portal works in any modern browser.
Do I need to be an administrator to install it?
Only once. The first install asks for administrator approval so Windows can trust the VaultDesk certificate. VaultDesk itself installs for your Windows account alone, and updates never ask again.
What happens to an application that is not on the list?
That depends on the policy. In Monitor it is reported and left running, which is the way to try a policy out. In Enforce it is asked to close, then ended. A policy set to Off does nothing at all.
How do I protect someone's PC?
They install VaultDesk and sign in with the same email and password they use for the portal; that registers the PC. You then put them on a policy from their VA page, and it reaches their PC within about a minute.
Can people tell what counts as work?
Yes. Every approved window gets a coloured frame, and the app itself shows whether protection is on and which applications are allowed.
Does VaultDesk block USB drives?
It reports them: a drive or memory card connected while VaultDesk runs is reported to the portal. Blocking them is not available yet.
How do updates work?
VaultDesk downloads new versions in the background and asks before installing one. It takes a few seconds and reopens by itself.
Windows says “publisher certificate could not be verified”. What now?
That message (0x800B010A) means the VaultDesk package was opened on its own. Close it and use the installer from this page instead: it trusts the VaultDesk certificate first, then installs.
Give your team a workspace you can trust
Install VaultDesk on a PC in about a minute. Every update after that arrives by itself.
Windows 10 and 11, 64-bit