Product guide

Platform Overview

What Moftgate is, which modules it contains, how the interface is organised, and where to start.

What the Platform Is#

Moftgate is a unified endpoint management and data security platform. It combines device management, data loss prevention, and cloud security posture in one on-premises appliance instead of several unrelated tools.

Because the platform runs inside your network, telemetry does not depend on an external cloud service. Endpoints that cannot reach the appliance store their data locally and deliver it when the connection returns.

Data residency by design

All platform data - telemetry, incidents, findings, and reports - is stored on your appliance. This is what makes regulated and closed-circuit deployments possible.

Moftgate Command Center overview — Command Center with fleet health score, needs attention cards, and getting started checklist.

Modules#

The platform is licensed per module. Endpoint Visibility is the base; the others are enabled according to your license:

Module	What it covers
Endpoint Visibility	Endpoint discovery, inventory, telemetry, and agent management. This module is available in every deployment.
DLP	Sensitive-content detection and channel control on the endpoint.
SSPM	SaaS connection and configuration posture management.
DSPM	Data discovery, classification, and PII findings across connected data sources.

Navigation#

The sidebar groups modules by function: endpoints, data protection, cloud security, threats and reports, and administration.
The Command Center is the default landing page and routes you into the module that needs attention.
Global search finds endpoints, users, policies, and modules by name from anywhere in the platform.
Tab selections are kept in the URL, so a view you are looking at can be shared or bookmarked.

Start at the Command Center

The Command Center summarises the whole platform and links into every module. It is the fastest way to find out whether anything needs attention.

Roles#

Access is controlled by role. Administrative surfaces - integrations, license, system settings, and workspace settings - are restricted, while operational modules follow the permissions granted to the role. Actions taken in the platform are recorded in the audit log.

1
Deploy the appliance
Install the on-premises appliance and complete first-run provisioning. Your data stays inside your own boundary.
2
Enroll endpoints
Download the agent package for each operating system and deploy it. Endpoints appear in the fleet after their first check-in.
3
Apply a profile
Group endpoints and apply an agent profile so security and visibility settings are consistent from the start.
4
Enable the modules you licensed
Activate DLP, SSPM, or DSPM according to your license and start with a narrow pilot scope.

Frequently Asked Questions#

Where does the platform run?

The platform runs as an on-premises appliance in your own infrastructure. Telemetry and data stay inside your boundary, which is what allows closed-circuit and air-gapped operation.

Which operating systems are supported?

The agent supports Windows, macOS, and Linux desktops and servers. Deployment packages are generated per operating system from the platform.

Do I need every module?

No. Endpoint Visibility is the base module. DLP, SSPM, and DSPM are enabled according to your license and can be adopted one at a time.

Where should I start?

Start with the Command Center to see the current state, then open Endpoint Management to confirm your fleet is reporting before you configure policies.