Password Manager checks whether a password manager is in use on the device, so each account holds its own password rather than one password across several tools.
Employee Device Compliance Monitoring
See which of your team's devices meet your company's security requirements and which fall short. WebWork's desktop app checks every machine it runs on for encryption, antivirus, automatic updates and screen lock, and reports the result for your whole workspace in one table. Choose the requirements that apply to your company, and add any detected device to your asset register with one click.
What Device Compliance Monitoring Is
Employee device compliance monitoring is the practice of checking whether each device used for work meets the security requirements of your company. A compliant device passes every requirement in force.
Requirements like encryption, antivirus and automatic screen locking appear in most security policies and in nearly every client security questionnaire. With employee device compliance monitoring, the process is automated so you don't have to confirm each device one by one.
Employee device security monitoring in WebWork only reports device configuration and does not change it.
Essential Security Checks on Every Tracked Device
If your employees are using the WebWork desktop app, it runs the most important company device security checks on every machine. The checks do not depend on a company network or VPN. A laptop reports its status from wherever it connects.
Hard Drive Encrypted checks whether the device's storage is encrypted. Encryption is what keeps the files on a lost or stolen machine unreadable.
Antivirus checks whether antivirus software is installed and running.
Auto Updates checks whether the operating system installs updates on its own. The importance of this check is that security fixes reach a device through updates.
Screensaver Lock checks whether the screen locks by itself after a set period without input, which is important for those working from a café, a coworking space or an open office, and for hybrid teams moving between them.
USB/External checks whether external storage is connected to the device. The importance of this check is that files copied to a USB drive leave your systems entirely.
WebWork is the only time tracker that checks device security settings through the app already installed for time tracking.
Which Standards Ask for Device Compliance Checks
Encryption, antivirus, screen lock and automatic updates are the device-level settings that security frameworks, privacy laws and client questionnaires ask about. WebWork reports on all of these. Screen monitoring shows what people work on; the Compliance tab shows whether the computer they work on meets each requirement, so the answer for every laptop is on screen before anyone asks.
SOC 2 and ISO 27001
Both audits ask for proof that laptops are encrypted, protected against malware, patched and locked when idle. SOC 2 covers this ground under CC6.1, CC6.8 and CC7.1. ISO 27001:2022 addresses it in A.8.1 for user endpoint devices, A.8.7 for malware, A.8.24 for cryptography and A.7.7 for clear screen. WebWork's checks give you a current, per-device record of these settings across your workspace, which is the evidence an auditor asks for rather than the full scope of any control.
GDPR and CCPA
Under GDPR Article 32 encryption is a named measure for the security of processing, and Article 34 removes the duty to notify affected individuals after a breach when the data was encrypted. CCPA requires reasonable security, with the California audit rules in force since January 2026 naming encryption, anti-malware and patch management among what an auditor reviews. The Compliance tab shows the state of those settings on every machine.
HIPAA
For a covered entity or a business associate, the Security Rule addresses encryption (§164.312(a)(2)(iv)), automatic logoff (§164.312(a)(2)(iii)), protection from malicious software (§164.308(a)(5)(ii)(B)), password management (§164.308(a)(5)(ii)(D)) and device and media controls (§164.310(d)(1)). Encryption also changes what a lost laptop means, since protected health information on a disk encrypted to the standard HHS points to falls outside breach notification. The Hard Drive Encrypted column shows which devices have encryption switched on, which is the first thing you would need to establish.
PCI DSS
Teams that handle card data, call centers and billing teams among them, need anti-malware on every in-scope machine (Requirement 5), current security patches (Requirement 6.3.3) and a screen that locks after 15 idle minutes (Requirement 8.2.8). The Antivirus, Auto Updates and Screensaver Lock checks show where each of those stands on the machines your team tracks time on.
Choose Which Checks Apply to Your Workspace
Security requirements differ from company to company, so you are free to select which requirements apply to yours. In WebWork, go to Settings > Compliance Monitoring and enable your preferred checks.
WebWork evaluates only the checks you switch on. This means that a device is compliant when it passes every enabled check.
One Compliance Rate for the Whole Workspace
The Compliance tab shows you not only individual statuses but also the whole workspace compliance rate, covering every device active in the last 90 days.
- Compliant — the device passed every check you enabled.
- Non-compliant — the device failed at least one.
- No data — the desktop app has not reported on the device yet.
- Ignored — you excluded the device from compliance tracking.
Below the rate, the device compliance dashboard lists every member with a column for each check and their overall status. A green check marks a pass, a red x marks a failure, and a dash means no data has come in yet. Any non-compliant device is listed with the specific check it failed, so the fix goes to the right machine.
How Teams Use Device Compliance Monitoring
Client security questionnaires
Vendor forms ask about laptop encryption, antivirus, screen lock and patching. The Compliance tab holds the current answer for every device, and the questions further down the form about activity logs and screenshots come from the same workspace through WebWork's employee monitoring software.
Audit preparation
SOC 2 and ISO 27001 auditors ask for device evidence covering every employee. Enable the checks the auditor named and the non-compliant list gives you the remediation queue.
Lost and stolen devices
Whether the disk was encrypted determines what a lost laptop means legally, and the Hard Drive Encrypted column shows where each machine stood.
Cyber insurance renewals
Applications ask whether every device is encrypted and running antivirus. The workspace compliance rate answers for the whole company in one number.
WebWork is the only product that shows a person's tracked hours and their device's security status in the same workspace. Compliance platforms hold the device data and no time data. Time trackers hold the hours and nothing about the machine.
Turn a Detected Device Into a Company Asset
WebWork also allows you to add the detected device directly to the asset register. Convert to asset creates the asset entry with brand, model, processor, RAM, storage type and capacity, operating system, hostname, MAC address and device ID filled in. The asset is assigned to the member using it and marked In Use.
From there the asset page keeps its own compliance block, so the device's security status is visible from either direction. The same registry holds software, subscriptions and any other asset type your company tracks.
Explore Asset Management
Device Compliance Without a Second Agent
Checking device security settings is normally the job of a dedicated endpoint compliance monitoring tool. That means a separate purchase, a separate rollout, and an agent installed on every device your team works on.
Device security compliance software normally arrives as its own deployment. Your team already runs the WebWork desktop tracker to record their hours, and now it can also report the device's security settings, so there is nothing new to install. Switch on the checks that matter to your company and the results appear as devices report in. The same desktop app runs on Windows, macOS and Linux.
Plans That Include Compliance Monitoring
Compliance Monitoring is included on the Premium plan at $7.19 per user per month. Pro and Plus teams can add it for $1 per user per month. Full plan detail is available on the pricing page.
Security and Privacy
WebWork is GDPR, CCPA and HIPAA compliant. Data is encrypted in transit and at rest. What each person can see is governed by member type, and SSO with automatic user provisioning is available on Premium.
WebWork's security practices and employee privacy commitments are documented in full on their own pages, and changes made inside the workspace can be reviewed in the audit log.
Trusted by Teams Worldwide
Jhannen R.
Accurate Tracking and Great Reports, But Screenshots Feel Intrusive
For me, WebWork Time Tracker solves a few major business problems. It removes the guesswork from tracking hours, which makes billing and payroll much more accurate. It also improves accountability, because I can see exactly how time is being spent across different projects. The reports are a big benefit as well—they give me a clear breakdown of tasks and productivity, so I can quickly spot where time is being wasted and make better decisions. Overall, it saves me time, keeps everything organized, and makes managing work feel a lot smoother.
Cesar P.
Great productivity reports
Accurate time tracking and detailed productivity reports. It eliminates guesswork in time tracking and manual reporting. This benefits me by streamlining my administrative workflow and keeping my workday organized.
FAQ
Device compliance monitoring checks whether each device used for work meets the security requirements a company has set, such as disk encryption, active antivirus or automatic screen locking. A device that passes every requirement is compliant, and a device that fails one or more is non-compliant with the failing point named.
WebWork checks the most important security points: password manager in use, hard drive encryption, active antivirus, automatic operating system updates, screensaver lock after inactivity, and connected USB or external storage. Each check you enable counts toward the device's compliance status.
No. The checks run through the WebWork desktop app your team already uses to track time, so there is no second agent to deploy. Switching the checks on in settings is the whole setup.
The device appears in the compliance table with the failing check named, so the right person can fix it. It keeps tracking time as normal, and its status updates the next time it reports.
An MDM enforces device settings and can push configurations, lock devices and wipe them remotely. WebWork's device compliance monitoring reports whether the settings are in place, using the desktop app already installed for time tracking, which covers visibility rather than enforcement.
No. WebWork is the only time tracker that checks device security settings through the app already installed for time tracking. The other products that run these checks are compliance automation platforms, which sit outside the time tracking category and install their own agent on each device. For a team already tracking time in WebWork, the checks run on machines that are set up for it. See how WebWork compares with Hubstaff, Time Doctor and Insightful.
Yes. Any device can be marked as Ignored from the member's Devices/Assets tab, which removes it from compliance tracking, and it can be brought back in from the same table. Personal phones and test machines are the usual candidates.
Workspace Owners and Executive Managers have access to the Compliance tab under People > Members.
The rate covers devices active in the last 90 days, sorted into Compliant, Non-compliant, No data and Ignored. A device counts as compliant only when it passes every check enabled in your workspace settings.
Yes. Convert to asset turns any detected device into an asset entry with its brand, model, processor, RAM, storage, operating system, hostname, MAC address and device ID already filled in, assigned to the member using it and marked In Use.
Yes. WebWork is the only product that shows a person's tracked hours and their device's security status in the same workspace. The Compliance tab under People > Members lists every member with a column for each enabled check, alongside the time data already recorded for them.
Yes. Device compliance for remote teams works the same way as it does in an office, because the checks run through the desktop app on each machine rather than through a company network. A laptop reports its status wherever it is connected from. Our guide to cybersecurity for remote and hybrid teams covers the wider practice.
Employee laptop security monitoring checks whether the machines your team works on have the security settings your company requires, such as disk encryption, active antivirus and automatic screen locking. WebWork handles employee device compliance through the desktop tracker already installed for time tracking, so no separate agent is needed.
Voted Top Time Tracking Software of 2026