Logotipo Cosmikal Endurance

Local Shielded Workspace LSW

Ranger is a server-based software + Thin Client devices solution that provides a Local Shielded Workspace (LSW) to securely access critical IT/OT assets — with strong isolation, centralized control, and seamless user experience.

Powered by ThinCOS

Shielded by design. Simple by default.

All user activity takes place in a controlled and shielded local environment. No general-purpose OS. No local attack surface. No distractions.

Thin clients boot directly into a read-only, non-persistent ThinCOS image.

System images are managed and updated centrally via Ranger Manager.

Users only see and access what they are explicitly authorized to.

Every session is isolated, shielded, and governed by policy.

Enable a secure, controlled, and effortless user experience.

shielded workspace

SECURE LOCAL ACCESS
WITH ZERO TRUST PRINCIPLES

Ranger provides secure, centralized control over workstations in environments where remote work is not suitable or allowed. By replacing traditional PCs with thin clients running ThinCOS, Ranger drastically reduces the attack surface while maintaining usability.

Ranger works standalone — or integrated with Endurance

Ranger can be deployed independently to protect local access points, or used as a shielded endpoint device for Endurance — delivering a unified workspace strategy across local and remote use cases.

 
shielded workspace

KEY FEATURES INCLUDE

shield_toggle_122dp_828AFF_FILL0_wght400_GRAD0_opsz48
Local Shielded Workspace
Each session runs in a fully controlled, non-persistent environment.
dvr_122dp_828AFF_FILL0_wght400_GRAD0_opsz48
Ranger powered by ThinCOS
Thin clients boot into a secure, lightweight OS with no local storage or OS exposure.
update_122dp_828AFF_FILL0_wght400_GRAD0_opsz48
Centrally Managed Images
All system updates and configurations are deployed instantly via Ranger Manager.
person_shield_122dp_828AFF_FILL0_wght400_GRAD0_opsz48
Minimal, Role-Based UX
Users only see the tools and systems they’re explicitly authorized to access.
account_circle_122dp_828AFF_FILL0_wght400_GRAD0_opsz48
Federated Identity & Security
Supports AD, LDAP, Microsoft Entra ID, Google Workspace, MFA, Vault, Audit, Backup, and Remote Support.
group_122dp_828AFF_FILL0_wght400_GRAD0_opsz48
Multi-User Environments Design
Perfect for control rooms, shared terminals, secure facilities, and operations centers.
 

HOW IT WORKS

1

Deploy Ranger Manager

Install the server component on-premise or virtualized. Configure system images, roles and policies centrally.
2

Boot Thin Clients

Devices start directly into ThinCOS, the shielded OS. No user has access to local storage or the underlying system.
shielded workspace
3

User login and access

Users authenticate and work inside a shielded local workspace tailored to their role — with access only to permitted assets and tools.
4

Total central control

Admins can monitor activity, push updates, assign access and rotate credentials from a single control point.

WE HELP YOU

If you need to learn more about our solutions and wish to obtain technical or commercial information, please fill out the following form:

Contact form

    Are you interested in an online demo?

    I have read and accept the Privacy and Data Protection Policy