deskproof_

deskproof · windows fleets · proof of display

Prove the wallpaper was actually displayed.

Push branded or security-awareness wallpaper to your Windows fleet and prove, per person per day, that it was on screen. A signed Windows agent measures the displayed minutes.

Honest framing: we are selecting about three free design partners to shape the fleet version. The single-machine agent ships today. The company console is being designed with those partners now.

installer
Authenticode-signed
telemetry
geometry + flags only
footprint
no kernel driver, no admin

the problem

"We sent it" is not proof anyone saw it.

Internal comms

Email opens are vanity.

You send the announcement three times and still hear "nobody told me." Intranet clickthrough is single digits. When leadership asks whether the org actually saw the deadline, you have nothing to show. The wallpaper is the one surface every employee sees every day without clicking.

MSP / IT admin

Auditors want ongoing evidence.

Quarterly awareness training is forgotten by lunch. Cyber-insurance forms and SOC 2 reviews increasingly ask for evidence of ongoing awareness activity, and "we ran the module in March" is thin. A per-endpoint display record is an audit artifact you can hand over.

what you get

A Reach Report you can forward to leadership.

Per person, per day: how many minutes your message was actually on screen while someone was at the machine. Fleet totals, per-seat detail, and the exact telemetry fields behind every number. Print it, attach it to the audit, or paste it into the board deck.

sample uses fictional data for a 214-seat retail fleet

Open the sample report

how it works today, honestly

A signed agent measures. The console is being designed.

01

Deploy the signed agent

A signed Windows tray app (Authenticode, publisher Wesley Sander, Azure Trusted Signing) installs per user via your MDM. No kernel driver, no service account.

02

Measure displayed minutes

On each machine the agent composites your message into the exposed wallpaper and measures how many minutes it was actually on screen, counting only when the person is present.

03

Roll up to the fleet

Per-person, per-day display data is the raw material for a company console. That fleet view is being designed with our first design partners. There is no live multi-seat dashboard yet.

privacy

Geometry and flags only. Never your screen.

what leaves the machine

The telemetry contract in code sends exactly four fields per minute. There is no field for window text, process names, or pixel data to put in, even if we wanted to.

timestamp
minute bucket
exposed area
megapixels visible
present / idle
true / false flag
creative id
which message

Never sent: window titles, process or application names, screenshots or pixel data, keystrokes, clipboard, browsing history, file contents. The original wallpaper is backed up before the first composite and restored on pause, quit, or uninstall. The full field list is on the transparency page.

for the it reviewer

Built to pass your onboarding review.

Signed installer
Authenticode via Azure Trusted Signing, publisher Wesley Sander. The pipeline refuses to publish anything that does not verify.
Silent install
NSIS installer, /S silent switch. No dialogs, no reboot. Assign in Intune User context.
Per-user install
Installs into the logged-in user's profile. Needs no elevation and no local admin rights.
No kernel driver
A standard Windows tray program. No browser extension, no kernel-mode component.
No service account
Runs as the signed-in user. Nothing to provision, no shared credential.
Clean uninstall
Uninstall always restores the original wallpaper first. No state where content is left behind with the app gone.

Want to be one of the three?

Tell us your fleet size and what your auditors or leadership keep asking for. Twenty minutes, no deck.

Book 20 minutes