Single pane of glass · BYOD-ready · powered by ASG

Lock down everything.
Open one secure pane of glass.

Let your people work from any device — personal, unmanaged, anywhere — while your endpoints stay locked down. Lens is the one controlled surface to every business app: web, virtual and desktop, governed entirely by your identity provider.

30-day free trial · guided setup · no card required
Any device, BYOD-ready
The browser is the client
Governed by your IdP
prism.acme.co/portal
Categories
All Apps
Productivity
Finance
Virtual Apps
Favourites

Your apps · Library

Productivity 4
WWord
XExcel
PPowerPoint
OOutlook
Finance 2
SSage
xXero
Virtual Apps 2
HR Portal
Legacy ERP
Microsoft, Google, SAML / OIDC & more
Encrypted in transit & at rest
Access follows your IT groups
Streamed to your SIEM
Mix & match · or stand alone

One control plane.
Compose the rest.

Lens is the single pane of glass at the centre. Run it on its own as a unified portal, or plug in the pieces you already have — your identity provider, your virtual-app farm, your SIEM — and it becomes the locked-down surface for BYOD. Take exactly what you need.

The browser is the clientReach the portal from any device — personal or unmanaged — with no MDM enrolment or agent.
Pair a farm, keep endpoints cleanStream apps from Cameyo, Citrix or AppStream and they run server-side — nothing lands on the device.
Zero-trust through your IdPAccess follows your identity provider's groups — grant and revoke in one place.
Feeds your SIEMStream launch and session telemetry to the SIEM you already run for full audit.
The platform

One pane of glass to everything

Every app your people need — web, virtual and desktop — unified, personalised and governed. Virtual apps come straight from Google Cameyo, Citrix, AWS WorkSpaces and other farms.

Every app, one place

Web, desktop and virtual apps — from Cameyo, Citrix, AWS WorkSpaces and more — surfaced together and personalised per user.

Hover for a live view →
All apps live
W
X
P
S

Governed AI marketplace

A curated catalogue of approved AI providers — staff sign up only to the ones you allow, with your own keys. Governed centrally, so sanctioned AI is the only path with a plug.

Hover for a live view →
AI marketplace governed
C Claude Approved
G Gemini Approved
AI Other AI Blocked

Real-user monitoring

See how the portal performs for real people — latency, load, drops — streamed to your SIEM so IT spots issues first.

Hover for a live view →
Live health RUM
Network 27 ms
Apps degraded
Client onboarding timeout

Zero-trust access

Sign in with Microsoft, Google or any SAML / OIDC provider. Access follows your IdP's groups — nothing more, nothing less.

Hover for a live view →
Sign-in SSO
MS Microsoft Entra ✓
G Google Workspace ✓
S SAML / OIDC ✓
groups → apps · revoke in one place

Enterprise-grade security

Single sign-on, tenant isolation and encrypted transport throughout — built for regulated environments.

Hover for a live view →
Security isolated
Tenant A isolated
Tenant B isolated
Transport TLS 1.3

Pulse — comms & collaboration

Broadcast announcements, run internal comms, gather feedback and track NPS — built into the pane your people already live in.

Hover for a live view →
Pulse NPS 72
Q3 policy is live 2h
72NPS
▲ 8 this month

Secure, moderated chat

Internal chat that stays inside your walls — moderated, logged and policy-aware, so conversations never leave the perimeter.

Hover for a live view →
#client-services moderated
Send the onboarding pack?
Sharing secure link 👍
⚠ Message held — policy (card number)

Modular by design

Every capability is a switch. Turn features on or off per tenant, mix and match the stack, or run lean — ship only what you need.

Hover for a live view →
Features per tenant
Web panes
AI marketplace
RPA
Local apps
Moderated chat

SIEM & alerts

Stream every event — sign-in, PII/DLP, moderation, app health — to your SIEM, and push real-time alerts to Slack, Teams or email the moment something trips.

Hover for a live view →
#it-alerts Slack
App down · Client onboarding timeout
PII blocked · card # redacted DLP
Message held · moderation policy
Impossible-travel sign-in blocked
→ Slack · Teams · Splunk · Sentinel
Productivity · the Lens super-browser

Four apps. One screen.
No tab-juggling.

Tile up to four apps side by side in a single secure workspace — CRM next to your spreadsheet next to email — resize them live, and flick between full-screen sets. Everything runs in the one pane, so your people stop hunting through tabs and just get work done.

prism.acme.co/portal/workspace
Web workspace
Salesforce Refresh
Spreadsheet Refresh
Xero Refresh
Client onboarding Refresh
Try me
Monitoring · RUM

See the whole path,
in real time.

We measure from the user's perspective. The path is simple — you → network → app — and Lens is the engine quietly tapping in to collect response times across every hop, so you see exactly what your people experience and IT spots trouble before anyone raises a ticket. Streamed to the SIEM you already run.

Connection & app health · ASG Lens1 down · 1 slow
You
Network27 ms
Appsdegraded
Salesforce 180 ms
Xero 680 ms
Client onboarding timeout
Lens · RUM engine
Off the path — Lens taps in at the user and collects response times from their perspective, all the way to each app.
RUM caught it — Client onboarding is down and Xero is slow, before anyone raised a ticket.
Comms & experience

Keep everyone aligned —
and know how they feel.

Broadcast announcements with Pulse, run secure internal chat that never leaves your walls, and track sentiment with built-in NPS — all inside the pane your people already live in, moderated and logged.

New: Q3 security policy is live 2h · Pulse
72NPS
70% promoters · 18% passive · 12% detractors▲ 8 vs last month
Has everyone seen the new policy?
On it 👍 sharing with my team now
Moderated · logged · stays inside your walls
AI marketplace Governed by IT
C
Claude
Approved
Subscribe
G
Gemini
Approved
Subscribe
Co
Copilot
Approved
Subscribe
AI
Other AI
Blocked
Blocked
Governed AI

An AI marketplace
you actually control.

Publish a curated catalogue of approved AI providers — staff self-subscribe only to the ones you allow, with your own keys, governed centrally. Sanctioned AI becomes the path of least resistance, so shadow-AI has nowhere to plug in through the portal.

Secure chat

Internal chat that
never crosses the line.

Real-time chat that stays inside your walls — every message moderated against your policy, logged for audit, and held automatically when something sensitive slips through. No data leaves the perimeter.

#client-services · 12 online Moderated
TM
Thabo M.

Can you send over the onboarding pack for the new client?

JD
Jane D.

Sure — sharing the secure link now 👍

RK
Ravi K.

Message held — flagged by policy (looked like a card number)

Message #client-services…

Start locking things down.

Spin up a 30-day free trial in minutes — a guided wizard seeds sample apps and web panes so you see the single pane of glass working from the first login. No card required.

Start free trial Talk to sales
Purchasing

Ready to roll it out?

Tell us about your organisation and we'll come back with pricing and a rollout plan. Already trialling Lens? This is also how you convert to a paid plan.