Products

GateCore Secure Access

Multi-factor authentication and firewall protection — built by CODE AND SYSTEMS LTD to protect Windows infrastructure, identities, and sensitive data. From personal authenticator to multi-tenant enterprise.

Our products

Five products. One platform.

Endpoint Protection, Firewall, User Activity, Remote Access and Backup work independently — or together — on the same agent and the same console.

MFA + DEFENDER
Endpoint Protection
Identity + Device Posture
Stop the attack at the sign-in — then prove the machine behind it is actually protected. Two layers, one agent.
✓
Brute force detected and acted on — the attacker's address shut out across every device you manage
✓
Defender managed & verified from one panel
✓
Live security score per device, worst first
✓
Self-protecting · cannot be disabled
✓
Active Directory & Microsoft Entra ID ready
Personal — Mobile£19.99/yr
Personal — Full£199.99/yr
Business£5/user/mo
All prices exclusive of VAT (+ VAT at checkout)
Explore Endpoint Protection →
GateCore Firewall
Network Protection
Clean blocks, no SSL errors. One-click access requests. IIS-aware intelligence with remote fixes.
✓
Branded block experience · zero confusion
✓
Request access · approved in 10 seconds
✓
Custom rules + per-user exclusions
✓
IIS awareness · one-click remote fix
Business add-on £12 /mo
Personal — Full Included
Enterprise Custom
All prices exclusive of VAT (+ VAT at checkout)
Explore GateCore Firewall →
NEW
User Activity
Workforce Insight
See how work happens without watching what's done. Live status, fair reports — metadata only, never content.
✓
Live active · idle · locked · offline
✓
Working-hours reports & CSV/Excel export
✓
Multi-session RDS · tracked per user
✓
Never keystrokes, screenshots or content
Business £10 /user/mo
All prices exclusive of VAT (+ VAT at checkout)
Explore User Activity →
NEW
Remote Access
Secure Remote Sessions
Connect to any managed machine from the device list you already use. No second console, no second vendor.
✓
One click from the endpoint list
✓
Set up once per machine, then instant
✓
Several machines at the same time
✓
You see the security score before you connect
✓
Scoped per organisation and per machine
Business add-on£29/mo
Devices included30
EnterpriseCustom
All prices exclusive of VAT (+ VAT at checkout)
Explore Remote Access →
NEW
GateCore Backup
Protection & Recovery
Taking a backup is the easy part — getting it back is the product. Open a virtual machine's disk and pull out a single file, without restoring the machine at all.
✓
Finds every machine you own — and counts the ones nothing protects
✓
Whole host or single VMs · no agent inside the machine
✓
Encrypted on the device · append-only vault ransomware can't wipe
✓
Browse a 126 GB disk — only the bytes you pick leave the vault
✓
GateCore Cloud, your own S3, or a NAS on your network
Business add-on£49/mo
Included5 servers · 20 VMs · 25 devices
Cloud storage · 1 TB£12/mo
All prices exclusive of VAT (+ VAT at checkout)
Explore GateCore Backup →
💡
Have a custom software requirement?
We build bespoke desktop apps, web tools, CRM systems, and automation solutions tailored to your business.
ON YOUR PHONE
13:54●●● ●●
Good afternoon
Oliver Bennett 👋
5 accountsSynced ●Secured
Google · Daniel Brookes
D
686 703140 268
Reddit · Luke Hammond
L
703 904951 337
Microsoft 365 · Sarah Whitfield
S
512 572308 741
GitHub · Jonathan Deane
J
761 927204 619
GateCore · Oliver Bennett
O
221 589876 032
GateCore Authenticator
Every code you need, in one place.
Multi-factor only
Google, GitHub, Microsoft 365, your bank — any service that uses one-time codes lives here alongside your GateCore sign-ins.
✓Codes work offline, with or without a connection
✓Synced across your phone and tablet
✓Approve GateCore sign-ins by tapping a number
🖥
It isn't a console. Backup, firewall, remote access and endpoint protection are managed from the web panel. Sign-in approvals arrive from Windows machines running the GateCore client.
Live protection

Stop password attacks before they happen.

Every login attempt triggers an instant MFA verification on your trusted device. No browser extensions, no compromises — just real protection that works.

✓
Push approvals directly from your phone
✓
Time-based codes with 5-minute expiry
✓
Full audit trail of every login attempt
See how it works →
GateCore
Verification required
ACTIVE
Your verification code
847 392
⏱ Expires in 0:24
Device: WIN-DESKTOP-01
Location: 192.168.1.50
Time: 14:32 UTC
Number matching

Approve with a tap — no codes to type.

When a sign-in needs verification, your phone shows three numbers. Tap the one displayed on your PC. Simple for users, impossible for attackers to guess.

✓
Phishing-resistant — number must match the PC
✓
One tap to approve or reject a login
✓
Time-limited — every request expires fast
Explore Endpoint Protection →
GateCore
Approve sign-in for John
Active
Tap the number shown on your PC
14
27
83
Approve
Deny
Expires in 0:24
Device: WIN-DESKTOP-01
Location: 192.168.1.50
Active Directory

Bring MFA to your domain — without the project.

The GateCore AD Connector installs once and quietly does the rest. It maps your existing domain users to MFA and starts protecting sign-ins — no schema changes, no migration, no weekend rollout. Your IT team barely lifts a finger.

1
Install the connector
A single setup on one machine. That's the whole install.
2
It maps your users automatically
Your domain accounts are recognised and linked to MFA — hands-off.
Sign-ins are protected
Every domain login now asks for approval. Done.
Explore Endpoint Protection →
Who signed in Device & IP Approved or denied Exact timestamp
Microsoft Entra ID

Already on Microsoft 365? You're ready.

GateCore plugs straight into Microsoft Entra ID (Azure AD). Your people sign in with their existing Microsoft account and approve on their phone — the same fast, phishing-resistant flow, now for your cloud identities. Personal and guest accounts are blocked automatically.

1
Connect your Microsoft tenant
A guided one-time connection. No directory rebuild.
2
Users sign in with Microsoft
Their everyday work account — nothing new to remember.
GateCore approves the sign-in
Approve on the phone, and only then are they in.
Explore Endpoint Protection →
Microsoft sign-in Personal accounts blocked Guests blocked Full audit trail
One approval flow · every outcome
GateCore
Approve on your phone
Open GateCore Authenticator and enter this number to continue.
98
Expires in 00:27
Only approve if you started this sign-in.
GateCore
Sign-in denied
This request was denied on your phone.
Access was blocked
The sign-in attempt did not continue.
GateCore
Request expired
This sign-in request timed out. Please try again.
Expired in 00:00
No approval was given in time.
Instant lock

One click. Any user. Locked in seconds.

A laptop walks out the door. An RDP session looks wrong. A leaver still has access. Hit lock from the admin console and that user's screen is sealed instantly — at a desk, on RDP, or working remote. It works for every account, Active Directory or Entra.

✓
Lock any session straight from the admin console
✓
Desk, RDP or remote — sealed in seconds
✓
Every account — AD and Microsoft Entra ID
Explore Endpoint Protection →
Active sessions
20 online
JS
j.smith
RDP · 192.168.1.42
ACTIVE
MA
m.adams
Remote · Entra ID
LOCK NOW
TK
t.khan
Console · CONTOSO\t.khan
ACTIVE
GateCore
Screen locked
Locked by administrator.
Verify on your phone to continue.
One agent · two layers

Who's at the keyboard. And whether the machine is safe to use.

Most tools answer one of those two questions. An attacker only needs the other one to go unanswered. GateCore protects the sign-in and the machine behind it — from the same agent, in the same console.

✓
Identity layer — brute force detection, instant lock, push approval on the phone
✓
Device layer — Defender, core isolation, BitLocker and Secure Boot managed and verified
✓
Nothing to integrate — one install, one bill, one place to look
Explore Endpoint Protection →
Endpoint Protection
One agent, two layers
Active
LAYER ONE
Identity & access
✓Brute force locked in under a second
✓Push approval on the phone
✓Active Directory & Entra ID
LAYER TWO
Device posture
✓Defender managed fleet-wide
✓Core isolation & BitLocker state
✓Live score, worst machine first
Source blocking

Locking the account stops the attempt. Blocking the address stops the attacker.

An attacker who runs out of guesses on one account simply moves to the next one. So GateCore doesn't stop at the account — it detects the pattern, takes action, and shuts the source address out of every device in your organisation. Not just the machine that was hit.

✓
Got a hardware firewall? GateCore talks to it directly — the traffic stops at your perimeter and never reaches a machine
✓
Haven't got one? The block is written to every device you manage — the whole fleet learns from one attack
✓
Reversible — blocked your own branch office? Release it in one click
See how source blocking works →
Blocked addresses
Perimeter and host, one list
14 active
Live blocks AUTOMATIC
185.220.101.44
14 failed logons · just now
PERIMETER
45.134.26.180
31 failed logons · 09:11 · RDP
PERIMETER
103.97.203.12
22 failed logons · yesterday
HOST
🛡 Applied across all 47 devices. The address that failed on one server is already shut out of the other forty-six — and it happened at 03:47, while nobody was awake.
Device posture

A machine with protection switched off looks completely normal.

Until someone looks. GateCore looks at every endpoint, every day, and reports what is actually running on the host — not what a policy says should be running. Every machine gets a live score, and the list is sorted so the one that needs you most is already at the top.

✓
Worst machine first — no hunting through a fleet of forty-seven
✓
Already running another antivirus? Keep it. Those hosts stay visible, and their platform security is still managed
✓
Red badge, red flag — if brute force detection isn't working on a machine, you see it without clicking anything
Explore Endpoint Protection →
Endpoint posture
47 devices · worst first
3 at risk
34
SRV-FILE-02
RTP OFFTAMPER OFFAUDIT OFFSB ON
68
WIN-DESK-12
RTP ONTAMPER ONHVCI PENDINGBL ON
96
WIN-DESK-04
RTP ONTAMPER ONAUDIT ONHVCI ON
⚠ SRV-FILE-02: failed logon auditing is off, so brute force detection isn't running there. It sits on the row — no clicking required.
Network protection

Clean blocks. One-click access requests.

GateCore Firewall stops threats, gambling, and malware sites with a branded block page — no confusing SSL errors. Users request access in one click; admins approve in seconds.

✓
Branded block page — zero user confusion
✓
Custom block rules added from the admin panel
✓
Per-user exclusions — flexible, granular control
Explore GateCore Firewall →
Access blocked
GateCore Firewall policy
Deny
36bet-casino.net
Gambling
Blocked
free-crack-download.ru
Malware
Blocked
Request access · approved in ~10s
Custom block rules & per-user exclusions managed from the admin panel.
Live Dashboard

Your whole team, one glance.

Six live counters, a seven-day working trend, and ranked lists of who's putting in the hours. Every Windows device reports in real time — active, in a call, idle, locked or offline. Metadata only, never content.

✓
Six live KPIs · updates as it happens
✓
7-day working-hours trend
✓
Top working · most idle · offline lists
✓
Tenant filter · Today / 7d / 30d
Explore User Activity →
Team Overview
36 of 41 devices reporting
Today ▾
12
Active
3
In a call
5
Idle
4
Locked
5
Offline
2
RDS
7-DAY WORKING TREND
j.smith · WORKSTATION-0192%
a.jones · RDS-SERVER-0188%
t.khan · DESKTOP-A164%
Reports & Export

Fair reports, working hours only.

Daily summaries scored on real working hours — idle and locked time outside business hours never counts against anyone. Export to CSV, Excel or PDF in one click for payroll, reviews or compliance.

✓
Working-hours activity score
✓
Composition breakdown per person
✓
One-click CSV · Excel · PDF export
Explore User Activity →
Daily Summary
CSVExcelPDF
User · DeviceActiveIdle%
j.smith · WS-017h 12m0h 48m92%
a.jones · RDS-016h 50m1h 05m88%
m.brown · DT-A15h 30m2h 10m71%
t.khan · TERM-024h 40m2h 55m64%
Per-person Detail

One click into anyone's day.

Open a person's full day in a single view — an activity ring, exact active, call, idle and locked minutes, and the total tracked time. Idle, locked and offline are counted within working hours only, so nobody is judged on their lunch break.

✓
Activity ring · working-hours score
✓
Active · calls · idle · locked breakdown
✓
Offline within work hours, shown separately
✓
Read-only · fair by design
Explore User Activity →
JS
j.smith
j.smith · Demo Corp
03 Jul ✕
100%
ACTIVITY
High activity
TRACKED TOTAL
9h 06m
Active
5h 44m
Calls
33m
Idle wh
0m
Locked wh
22m
Offline (within work hours)
2h 27m
Idle, Locked and Offline are counted within working hours only · Read-only view
Privacy by design

Insight, not surveillance.

This is not spyware. GateCore User Activity records session metadata — when devices are active, idle or locked — never what's on the screen. You stay in control of what's collected and for how long.

✓
Off by default · opt-in per device
✓
Adjustable retention · you decide
✓
Device exclusion · tenant isolation
✓
Your data stays in the UK
✓
What it sees
Sign-in / out times
Lock / unlock
Idle / active periods
Device + approx. area
✕
Never touches
Keystrokes
Screenshots
Websites / apps
Files · messages · audio
Secure remote sessions

The Connect button is on the device row.

You're looking at a machine's security state and you need to get on it. There is no separate app to open, no ID to read out over the phone, no code to type into a chat window. The button is right there, next to everything else you already know about that machine.

✓
One click from the endpoint list — nobody at the other end has to do anything
✓
Set up once per machine — every session after that is instant, permanently
✓
Several machines at once — read a log on one server while a service restarts on another
Explore Remote Access →
Devices
28 managed · 24 online
Online
WIN-DESK-04
Windows 11 · Marketing
96 Connect
SRV-FILE-02
Windows Server 2022 · File
34 CONNECT
WIN-DESK-12
Windows 11 · Accounts
68 Connect
💡 You see the score before you connect. A remote tool on its own has no idea whether the machine you're joining is protected.
Access control

Remote access is the shortest path into a network. So it goes through three checks.

Every session request is verified before anything opens. Not a setting somebody remembers to switch on — it is simply how connecting works.

✓
Windows — up to 30 devices, one flat monthly price
✓
Scoped per organisation and per machine — admins only reach what they should
✓
Part of the same platform — no second vendor, no second console, no second bill
Explore Remote Access →
Before a session opens
1
Is the device known?
Only machines registered in your console can be reached. An unknown host isn't a target — it simply isn't there.
2
Is remote enabled for the organisation?
Switched on per organisation. Businesses that don't want remote access never have it available at all.
3
Is it enabled on that machine?
Individual devices can be excluded even inside an organisation that allows it. The exception is per machine.
⚠ And if the machine isn't quite the machine you remember — rebuilt, or its identity no longer matches what your console recorded — the connection stops and asks you first. Nothing opens quietly.
Everything GateCore can see

You can't protect what nobody remembered to add.

Most backup gaps aren't technical failures. They're a machine somebody built in a hurry two years ago that never made it into a job. Connect GateCore and the inventory builds itself.

Infrastructure
Everything GateCore can see, and what is protected on it
Tenant · All tenants ↻ Rescan
Hosts
5
all reporting
Virtual machines
24
13 of 24 protected
Physical
43
4 of 43 protected
Not protected
50
no job writes them
Gone
0
nothing stale
Last 24 hours
8/13
1 failed
Inventory
▸▤Virtual infrastructure
▸◆Hyper-V
▸▤Standalone hosts5
CONTOSO-SRV3 VMs
HV-HOST-017 VMs
HV-HOST-0210 VMs
▸◆VMware vSphere
▸◆Proxmox VE
▸▤Physical & cloud
▤Windows computers4
▤Unmanaged39
▸◷Last 24 hours
✓Success8
!Warning4
✗Failed1
Click a row for details and actions — or use ⋯ / right-click / long-press for the quick menu
NamePlatformVMsCPUMemoryProtected byInventory
CONTOSO-SRVHyperV332 cores96 GBAll Servers — Contoso11h ago
CONTOSO-SRV-2HyperV228 cores128 GBAll Servers — Contoso8m ago
HV-HOST-01HyperV732 cores192 GBHyperV — HV-HOST-016m ago
HV-HOST-02HyperV1020 cores128 GBHyperV — HV-HOST-018h ago
NORTHWIND-HOSTHyperV232 cores96 GBNot protected11h ago
5 host(s)
CONTOSO-SRV
HyperVContoso Foods Ltd
Protected by All Servers — Contoso
3
Machines
32
Cores
96 GB
Memory
2/3
Protected
Create a backup job
Covers the whole host, including machines added later
›
Nothing to restore yet
No restore point exists for this object
›
Rescan this host
Ask the agent to list its machines again
›
✓
A running count of what isn't protected — not a report you have to go and generate, a number that goes up the moment something new appears.
✓
Unprotected shows amber, not grey — grey means unimportant, and a machine nothing backs up is the opposite of unimportant.
✓
Click a row and the actions come to you — create a job, restore, or rescan, without hunting through a hidden menu.
Host or machine — your call

Tick the host and you're done. Tick one machine and only that one goes.

Two ways of working, and neither is a compromise. Take the whole host when you want everything on it covered without thinking about it again. Take individual machines when only three of the fourteen actually matter.

✓
Whole host — including what doesn't exist yet. Somebody spins up a new VM next March and it's already in the job. Nobody has to remember, which is exactly how machines end up unprotected.
✓
No agent inside the virtual machine. Nothing to install on machines you may not even have a login for — a VM you inherited is protected the day you find it.
✓
Mix both in one job. One host whole, plus two machines from somewhere else — one schedule, one destination, not three jobs to keep in step.
See how jobs are built →
Add object
A whole host, or machines inside it
CONTOSO-SRV
Whole host — every machine, now and later
3 VMs
APP-01
Running
98 GB
FILE-SRV
Running
276 GB
SQL-01
Single machine from HV-HOST-02
228 GB
⚠ also adds this host to the job — pick a machine on a host that isn't in the job yet and it tells you, before you commit. No quiet side effects.
Retention you set, per job
7
Daily
4
Weekly
12
Monthly
1
Yearly
File-level recovery

Browsing a 126 GB disk costs you megabytes.

Most backup tools can only give back what they took: an entire machine. GateCore opens the disk read-only, straight from the vault. Nothing is downloaded up front — you walk the folders, tick what you want, and only those bytes ever leave.

✓
The live machine is never touched — nothing booted, nothing duplicated, nowhere to find room for
✓
A file, a folder, or the whole machine — the size of the problem decides, not the tooling
✓
Files already at the destination are never quietly overwritten — you're told, by name
Explore GateCore Backup →
Restore files
FILE-SRV · 07 Aug 03:16
Read-only
This disk › Volume C: › CompanyData\Finance
◪Payroll—
✓◪Invoices 2026—
✓▫Year-End-Accounts.xlsx4.2 MB
▫VAT-Return-Q1.pdf318 KB
2 itemsSelectedfolders come with everything inside
86 MBTo restoreonly these bytes leave the vault
126 GBDiskbrowsing costs MBs, not GBs
The backup ransomware can't reach

Modern ransomware looks for your backups first.

It knows encrypting your servers is only leverage if you can't just restore. So it hunts down the backup share, the mapped drive, the credentials sitting on the backup server — and destroys those before it announces itself.

✓
Encrypted before it leaves the machine. What travels, and what sits in the vault, is already unreadable.
✓
Append-only — written, never wiped. A machine that has been taken over can add to your history. It cannot erase it.
✓
The password isn't on the machine. Generated on the server, never displayed — nothing on the endpoint for an attacker to steal.
Talk to us about backup →
How a backup survives an attack
On the machine
Data is read
Encrypted here
Before it leaves
In transit
Already unreadable
Append-only vault
Written, not wiped
And it takes less room than you'd think
What the machines hold1.4 TB
What you actually store395 GB
Identical data is stored once and what's left is compressed — twenty machines running the same Windows build don't cost you twenty copies of Windows.

Ready to secure your access?

Protect your organization's identity, devices and remote access with GateCore — from personal authenticator to multi-tenant enterprise.