Workspot SIEM Integration

Workspot’s deep data inspection and analysis via Workspot Watch and Workspot Trends generates a wealth of valuable information on the current, ongoing, and historical health of all VDI sessions. This valuable insight can be shared to external security information and event management (SIEM) systems like Splunk, and IT service management (ITSM) systems like ServiceNow via the Workspot API. This represents a key part of Workspot’s multi-faceted end-to-end zero trust security model.

Workspot Watch helps enforce your Zero Trust Security policy, but unlike other virtual desktop solutions, we go way beyond just supporting zero trust endpoints. The trending capabilities of Watch reveal activity patterns across each customer’s global desktop estate that can indicate a brewing security issue, providing an opportunity for proactive mitigation measures to be taken. While the Workspot Enterprise VDI platform is fully instrumented to feed activity data to Workspot Watch, it’s critical to note that unlike other VDI solutions, our virtual desktop control plane is completely separate from the customer’s data plane, so Workspot never sees, nor does it have access to customer data.

Workspot support teams monitor VDI platform behavior globally, across cloud regions. Individual customers also make use of this valuable system health data by feeding it into their Security Information and Event Management (SIEM) systems to enable security alerts, ongoing monitoring, and day-to-day operations optimization to ensure internal governance compliance.