Beta
Download

VEIL FOR ORGANIZATIONS

The screen policy your engineers will actually follow.

Security policy says lock the screen. Engineers don’t, because the agent is mid-task and locking stops it. Veil takes the choice away: screens go black on their own, work keeps running, and the way back is Touch ID.

Buy seats · $24 eachMDM deployment

One-time per seat, from 5 seats. Self-serve checkout. Invoices from Polar. No sales call required.

THE GAP

Unlocked laptops are the default now

Coding agents, browser automation and desktop assistants run for minutes at a time and watch the screen while they do it. Locking macOS shows them a lock screen. So people stop locking, and every empty desk is a readable screen.

THE FIX

Dark screens, running work, Touch ID back

Veil turns every display physically black after a few minutes of inactivity, keeps the session and the agents running underneath, and restores the displays only after macOS has confirmed the lock and asked for Touch ID or a password.

THE BOUNDARY

A privacy control, described honestly

Veil does not lock the Mac. A person at the keyboard could still operate the unlocked session without seeing it. Where you need a session lock, keep requiring one. Veil closes the gap in the hours when nobody locks.

DEPLOYMENT

A profile and a package. That is the whole rollout.

There is no server to host, no agent to enroll, no dashboard to secure. The configuration profile is the entire management surface, and it takes effect on the Mac without restarting the app.

  1. 1

    One checkout. One key.

    Choose a seat count and pay by card. You receive one VTL- organization key and a sign-in link to the admin portal. Add seats later in the same place.

  2. 2

    Download the installer and the profile

    The portal gives you a signed, notarized installer package and a configuration profile pre-filled with your key and policy, with recipes for Jamf Pro and Kandji.

  3. 3

    Push both with your MDM

    Each Mac installs silently, activates against your key on first launch, and applies the managed settings. The employee sees nothing to set up.

Open the admin portalDownload Veil.pkg

WHAT THE PROFILE CONTAINS

  • Managed preferences for the com.itsveil.app domain: your key and policy.
  • Veil opens at sign-in, without a background-item prompt.
  • Optionally, an Accessibility permission for the input deterrent. Requires a supervised Mac.

MANAGED KEYS

KeyTypeEffect
TeamLicenseKeyStringYour VTL- key. Activates silently on first launch.
TeamLicenseEmailStringAdmin email for the activation record. Jamf $EMAIL templating works.
automaticVeilEnabledBooleanVeil after inactivity.
automaticVeilDelayNumberSeconds without input: 30, 60, 300, 600, 900 or 1800.
requiresAuthenticationOnUnveilBooleanWhen true, always ask for Touch ID or password before restoring displays, unless automaticVeilAuthenticationDelay is also set.
automaticVeilAuthenticationDelayStringWhen to ask for Touch ID on return, for every veil, counted from when the screens go dark: immediately, oneMinute, fiveMinutes, fifteenMinutes or never.
LaunchAtLoginBooleanOpen Veil at sign-in.
blocksPhysicalInputWhileVeiledBooleanOptional deterrent. Needs Accessibility.

What stays with the employee

The keyboard shortcut, “Unveil on any key or mouse move”, appearance, language, sounds and the branded transition. Managed values show as “Managed by your organization” in Settings; everything else stays theirs.

Two things to know before you push

One optional shortcut setting still needs the employee to allow it in System Settings. Match the Accessibility approval in the sample profile from the portal.

SEATS AND LIFECYCLE

One key. A pool of seats. No user accounts.

  • Every Mac that activates takes one seat. Activating the same Mac again is free.
  • Offboarding is a wipe plus a click: release the seat in the portal and it is free for the next Mac.
  • Add seats any time, even one at a time once you have a team. Invoices come from Polar, our merchant of record.
  • The admin portal signs in with a magic link to your admin address. No passwords, no SSO to configure, nothing to integrate.
  • There are no end-user accounts in the app. Employees never sign in to anything.

NOTHING TO HOST, NOTHING TO WATCH

Runs as the user. Talks to almost nobody.

  • Developer ID signed, hardened runtime, notarized. No root access. Runs as the logged-in user.
  • Accessibility is only needed for optional input features, and is off by default. Input Monitoring is optional too.
  • Diagnostics are sent only when a person chooses to send feedback, and never include screen contents, filenames or keystrokes. Product analytics is separate and can be turned off.
  • Network calls: license activation and revalidation, an update check if enabled, and product analytics while that choice is on. Fleets may disable in-app updates and redeploy packages instead.
  • Licensing can never trap a Mac: restoring displays works with an expired, revoked or missing license.
Read the security & privacy page

SELF-SERVE

One checkout. One key.

Choose a seat count and pay by card. You receive one VTL- key and a sign-in link to the admin portal. No sales call.

  • One VTL- key for the whole organization.
  • Macs activate silently on first launch.
  • Add seats later in the admin portal.

ORGANIZATION

$24/ seat

One-time. Minimum 5 seats. Share one VTL- key across the team.

Total $120

PROCUREMENT

Need a purchase order, a security questionnaire, or more than fifty seats?

Write to us. A person answers, usually the same day. Everything else is self-serve on purpose, so you never have to wait for us to get started.

sales@itsveil.com

Leave the desk. Leave the work running.

Download Veil, press ⌃ Esc, and watch every screen go black while the Mac carries on.

Download for MacPricing