Understand the workday.
Review live availability, application activity and screenshots together. Use the context to ask better questions about work and blockers.
See the evaluation checklist →
Cleanwork by PTM
Employee monitoring.
Employee monitoring.
On your infrastructure.
Understand team activity, configure monitoring hours, and keep control of your monitoring data. Built for teams that want visibility into the workday and a deployment they control.
Own your licence. From INR 41,999, one-time. See plans →
- Windows, macOS & Linux X11
- Encrypted at rest
- Your monitoring schedule
Connected to your teamLive presence, at a glance
Set working hoursPer person or in bulk
CleanworkSample workspaceWORKSPACE OVERVIEW
Today
Your team, in focus.
Active now
18
Idle
4
Offline
9
Team
memberStatus
ARAanya RaoActive
JMJonas MüllerIdle
SKSam KhanActive
Activity through the day
09:0013:0017:00
Private by architecture.Self-hosted & encrypted.
3 OS
Windows - macOS - Linux
AES-256
Encrypted at rest
100%
Self-hosted, your data
Real-time
Live presence & control
Is Cleanwork right for your team?
Start with the problem you need to solve.
A practical fit for remote and hybrid teams with someone responsible for deployment, access and monitoring policy.
Control where records live.
Run the monitoring server on your infrastructure, choose screenshot storage and configure retention. Plan for backups and ongoing administration.
Review data handling →Set boundaries for collection.
Configure working days and monitoring windows per employee or in bulk, including overnight shifts. The agent pauses collection outside those windows.
Explore capture and schedules →Need payroll, SSO/SAML or advanced workforce analytics? Confirm those requirements with PTM before choosing a plan. Activity signals provide context; they do not measure the quality or value of someone's work.
What you can do today
Visibility with controls you can configure.
Connect workday activity to its context, then decide when to collect it and how long to keep it.
Screenshot monitoring
Periodic desktop captures, compressed to WebP so storage stays tiny, and encrypted before they ever touch the disk. You control the interval, quality and resolution.
Activity & idle tracking
Review active and idle periods alongside application and browser URL metadata. Input activity is a signal for discussion, rather than proof of focus or performance.
Real-time presence
A secure websocket keeps live Active / Idle / Offline status flowing to the dashboard. The "Active Now" count updates instantly, no refresh needed.
Monitoring hours
Restrict tracking to set working hours and weekdays, per employee or in bulk. Outside those hours the agent fully pauses, and changes reach running agents in real time.
Productivity dashboard
A fast dashboard with per-employee timelines, screenshot galleries, activity charts and productivity breakdowns. Everything is a click from the dashboard home.
Self-hosted & private
Runs on your own server with Docker: MongoDB and a self-contained Node server that serves both the API and the dashboard. You control retention, access and every byte of data. Optional cloud storage is configured by an administrator from the dashboard.
Why CleanworkOwn your licence.
Own your licence.
Choose where your monitoring data lives.
For teams that want core employee monitoring and deliberate control over the operating model, Cleanwork is a one-time software purchase. Infrastructure, storage and administration are separately budgeted so there are no surprises.
Keep the version you bought.
Your purchased version continues to run even if you do not renew optional updates and support.
Choose your infrastructure and storage.
Run Cleanwork on your infrastructure and use local or private external screenshot storage.
Grow inside your chosen tier.
Choose 15, 75 or unlimited licensed employees without a new software charge for every added employee.
Compare licensing models and operating costs. Check the dated sources on the pricing page when evaluating alternatives.
How it works
Up and running in three steps
Your monitoring records go to your deployment. Accounts, billing and connected licence verification use separate PTM services.
Prepare your workspace
Choose self-hosting or discuss a dedicated managed deployment with PTM. For self-hosting, follow the deployment guide, configure HTTPS and activate your server.
Install the agent
Explain your monitoring policy, create an employee enrollment invitation and share the code and HTTPS server address. Install the matching agent and grant the required OS permissions.
Monitor from the dashboard
Watch live presence, review activity and screenshots, and set monitoring hours per person or in bulk, all from one secure admin dashboard.
Capture
Review work in context. Control capture volume.
Choose screenshot settings and retention to suit your monitoring policy and storage budget.
- WebP compression shrinks screenshots dramatically versus PNG/JPEG, so you keep more history for less storage.
- Tunable capture. Set the interval, quality and max resolution to match your policy and your disk budget.
- Idle-aware. Activity and idle are tracked separately, so every screenshot comes with real context.
- Encrypted first. Captures and URLs are AES-256-GCM encrypted before they're written to disk.
SCREENSHOTS - today
🖼️09:15 - main.docxWebP - 47 KB
🖼️09:25 - dashboardWebP - 52 KB
🖼️09:35 - figma.comWebP - 61 KB
🔒Encrypted at restAES-256
Schedule
Monitor on your schedule, not around the clock.
Set the hours the agent should be watching. Outside them it pauses itself.
- Start/end + weekdays in the employee's local time, including overnight windows like 22:00-06:00.
- Per-employee or bulk. Select many people and set their hours in one go.
- Instant push. Schedule changes reach running agents over the socket and apply right away.
- Off-hours means fully paused. No screenshots, no activity, no heartbeat. The employee simply shows Offline.
MONITORING HOURS
Aanya Rao09:00-18:00 -
Mon-Fri
Night shift team22:00-06:00 -
Mon-Sat
Lucia BianchiAlways on
Security & privacy
We treat this data like it's sensitive, because it is.
Monitoring data is some of the most sensitive data a company holds. Cleanwork by PTM treats it that way at every layer.
S/1
AES-256-GCM at rest
Screenshots and captured URLs are encrypted on disk. Protect the encryption key and backups separately; access to the key allows decryption.
S/2
OS keystore tokens
The agent protects its saved device credential where operating-system encryption is available and never written in plaintext.
S/3
HttpOnly cookie auth
Dashboard sessions ride in HttpOnly cookies, so a cross-site scripting bug can't read your JWT. Tokens never touch JavaScript.
S/4
Strict CSP & headers
The server ships a strict Content-Security-Policy, HSTS, nosniff and clickjacking protections out of the box, via Helmet.
S/5
Block or remove in a click
Administrators issue employee enrollment codes and can block or remove devices. Your licence limits enrolled employees. No shared enrollment secret ships in the installer.
S/6
Hardened by default
bcrypt password hashing, API rate limiting and offline Ed25519 licensing. All of it is on out of the box.
Your infrastructure, end to end
Every component runs inside your perimeter. Data flows agent → Node server (API + dashboard) → storage, with access controlled by your organisation.
Desktop Agent
Windows, macOS and Linux X11. Collects activity during configured monitoring hours.
HTTP/S + WS
Bring-your-own TLS
Optional. Your reverse proxy, load balancer or Cloudflare terminates HTTPS for public access.
forwards
Node Server
Express + Socket.IO. Auth, ingest, realtime presence; serves the dashboard.
encrypted
MongoDB
Your database. Screenshots on an encrypted volume.
Pricing
Buy it once. Own it outright.
Pay securely through Razorpay in the PTM customer portal. PTM cloud workspaces are built automatically once the payment is confirmed, and the link is emailed to you.
A one-time self-hosted licence you keep, starting at INR 41,999 for up to 15 employees. There is no per-seat subscription for the software; infrastructure and optional updates/support renewal are separate. Explore card-verified trials on eligible subscriptions in the customer portal.
INR 41,999 one-time
Up to 15 employees, self-hosted. Everything in the product, nothing withheld.
INR 2,14,999 one-time
Up to 75 employees, plus priority support and a guided deployment review.
INR 3,35,999 one-time
Unlimited employees on one licence, with onboarding and migration assistance. See what is included.
FAQ
Questions, answered
Still curious? Ask the assistant in the corner. It knows the product inside out.
How do eligible trials work?
Eligible subscriptions offer a card-verified trial. The customer
portal shows the duration, seat limit and subsequent billing terms. Cancel before the trial ends to avoid
the first plan charge. After evaluation, choose a one-time self-hosted licence that you
own or request a dedicated managed-hosting quote covering your usage.
Where is my data stored?
By default, everything is stored on your own server. An administrator can optionally
configure AWS S3, Cloudflare R2, or another S3-compatible provider from Settings. Cloud credentials are
encrypted on the server and never exposed to the dashboard after saving.
Which operating systems are supported?
PTM supplies Windows NSIS installers, macOS DMG/ZIP and Linux X11 AppImage/deb/rpm packages. Use a tested release for your OS and architecture; permissions and Linux helpers are required. See the platform matrix.
How are screenshots stored and protected?
Captures are compressed to WebP to keep files small, then encrypted at rest with
AES-256-GCM using your own
DATA_ENCRYPTION_KEY. Captured URLs are encrypted the same way. You
also set how long screenshots are retained before automatic deletion.Can I limit monitoring to working hours?
Absolutely, and it's flexible. Give each employee one or more
windows, each with its own days and start/end time, so you can set different hours per
day, split shifts, weekend hours or overnight windows, all in the employee's local time. Set them per
person or in bulk. Outside every window the agent fully pauses and shows Offline, and changes are pushed
to running agents in real time.
Is employee monitoring legal?
Monitoring laws vary by country, state and industry. As a rule, be transparent: tell
employees what's collected, why, and get the consent your jurisdiction requires. Cleanwork by PTM is meant to
be used openly, and the agent runs visibly in the system tray. This isn't legal advice; consult counsel
for your region.
How long does deployment take?
Deployment time depends on your infrastructure, HTTPS configuration and device permissions. Follow the deployment guide, activate your workspace, then enroll a pilot device before rolling out to the team.
Can employees tell they're being monitored?
Yes, and that is deliberate. The agent lives in the system tray with a visible status
icon (active / idle / disconnected). Transparent monitoring builds trust and keeps you on the right side
of the law.
A focused product evaluation
Know what to check before you buy.
Use a small, informed pilot group. Ask PTM to walk through these tasks against your requirements and supported operating systems.
Verify the activity view
Enroll a test device, check Active / Idle / Offline status, then review its activity timeline and screenshots. The preview above uses illustrative sample data.
Read the dashboard guide →Check monitoring boundaries
Set working hours, include a shift that matches your team, and verify the agent pauses outside the configured window. Review the visible tray status with participants.
Review available controls →Confirm the operating cost
Agree seats, supported devices, hosting, storage, backups and support. Review trial eligibility and billing terms before you start a trial.
Review plans and hosting →
See Cleanwork for your team
Request a product demo.
Tell PTM about your team and the problem you want to solve. We'll plan a walkthrough of activity, monitoring hours and deployment, and answer pricing questions on the same call.