Fleetfold Verify
Verified push on Windows
When policy requires it, the PC displays a short verification code during sign-in. The user must enter those digits on the phone before Approve is accepted.
That design defeats blind push fatigue attacks. An unexpected prompt cannot unlock the workstation without the code visible on the legitimate screen.
USB storage block
Turn on Block USB storage in Policies, or use Fleetfold MDM for selective users and devices. Enrolled agents apply it in about 20 seconds.
Keyboard and mouse still work. Fleetfold MDM adds shell lockdown, browser URL whitelist, timed lock, and remote wipe as a separate product.
Mobile biometric unlock
Users unlock the Fleetfold app with the device biometric they already trust, then approve or deny Windows sign-in requests in seconds.
Background push delivery keeps high-assurance prompts reliable when the app is not open in the foreground.
Fleet-wide enforcement
Deploy across managed workstations with consistent policy from the admin console. Shared and kiosk profiles prevent trust shortcuts on lobby or lab machines.
Windows Hello coexistence
Keep password paths MFA-first while allowing Windows Hello or FIDO where your policy permits. Users get a modern Windows 11 experience without dropping second-factor control on classic sign-in.
IT chooses coexistence per environment: strict for shared stations, flexible for managed laptops with Hello enrolled.
Push, TOTP, offline
Primary push MFA with passcode fallback and travel or offline packs when connectivity is limited.
USB storage block
One policy toggle blocks removable USB disks on enrolled PCs. Pair with MFA so logon success is not an easy exfiltration path.
Kill switch
Deny or report fraud can queue a disconnect for the workstation that initiated the challenge.
Hello coexistence
Optional Windows Hello or FIDO alternate when policy allows, while password paths stay MFA-first.
Security Ops
JIT access, anomalies, containment, sessions, playbooks, posture scoring, and evidence packs.
Background push
Firebase Cloud Messaging keeps approve prompts arriving when Android is backgrounded or idle.
Self-hosted control
Your host, your database, your enrollment. No mandatory per-seat MFA cloud tax to complete logon.