A persistent, configurable watermark sits on the monitored screen, deterring photos of sensitive data and identifying the source if one surfaces.
Schedule a Demo
Every DLP control that blocks uploads and USB transfers still leaves one channel wide open: a smartphone aimed at the monitor.
Every DLP control that blocks uploads, emails, or USB transfers still leaves one channel wide open: a smartphone aimed at the monitor. A contractor opens a confidential pricing sheet, snaps it, and walks out. No file was transferred. No policy fired. The data is gone anyway.
On-screen watermarking closes that gap by making the screen itself carry identifying information — text that can include the employee's username, the date, or a custom string, rendered over the working area of designated applications. A photograph of that screen is also a photograph of the watermark, which makes it far easier to trace a leak back to the person who took it.
Anexet's DLP module already covers the transfer channels a watermark cannot reach — HTTP(S), clipboard, print, external storage, network shares, and messenger files. On-screen watermarking is a complementary layer built specifically for the risk of someone photographing a screen rather than exfiltrating a file.
Perimeter and network DLP controls cannot stop a photograph of the screen — a visible watermark closes that blind spot.
When a photo leaks, the watermark's identifying text helps the security team name the user and session involved and rebuild the incident timeline.
Watermarks are scoped to high-risk users or sensitive document viewers, so everyday work across the rest of the organization is unaffected.
The controls below are configured through the same DLP policy layer as Anexet's other data protection rules.
The security officer sets an opacity level that survives a phone camera without obstructing the user's work.
Font and rotation angle are adjustable, so the watermark is harder to crop or digitally remove from a photograph.
Watermark text can include dynamic identifiers such as the logged-in username, alongside static text or a custom string.
The watermark appears only in the specific applications or when the specified websites are accessed, leaving every other screen unaffected.
Watermark rules are assigned to specific agent profiles — groups of users, departments, or individual endpoints.
Configured through the Anexet Client Console alongside other DLP rules, with no separate tooling required.
On-screen watermarking is a transparency tool as much as a deterrence one — employees see, in plain sight, that they are working with data the organization treats as sensitive.
The Anexet endpoint agent renders the watermark on top of the specified applications the moment they are in focus, at the display layer only — without modifying the underlying documents or files.
Anexet is deployed entirely on-premise. All DLP policy configurations, agent deployments, and any incident data remain inside your infrastructure. Scinero Software Limited has no visibility into your organization's data at any time.
A four-step workflow, fully configured inside the Client Console.
The security officer opens the DLP module in the Client Console and creates a watermark rule: display text (static string, dynamic user identifier, or both), transparency, font, and tilt angle.
1
The rule is scoped to one or more agent profiles — specific groups of users, departments, or individual endpoints — with the applications and web resources where the overlay should appear.
2
The Anexet endpoint agent renders the watermark on top of the specified applications the moment they are in focus, without modifying the underlying document or file.
3
If a photograph of the screen circulates, the watermark text helps identify the user, the date, or any other token embedded in the policy, so the security team can build an incident timeline in the Client Console.
4
The security officer opens the DLP module in the Client Console and creates a watermark rule: display text (static string, dynamic user identifier, or both), transparency, font, and tilt angle.
1
The rule is scoped to one or more agent profiles — specific groups of users, departments, or individual endpoints — with the applications and web resources where the overlay should appear.
2
The Anexet endpoint agent renders the watermark on top of the specified applications the moment they are in focus, without modifying the underlying document or file.
3
If a photograph of the screen circulates, the watermark text helps identify the user, the date, or any other token embedded in the policy, so the security team can build an incident timeline in the Client Console.
4
Common questions about on-screen watermarking in Anexet.
An on-screen watermark is a semi-transparent text overlay rendered on a user's monitor, identifying the user or session on the screen itself so that a photograph taken with a smartphone also captures the identifying text. In a DLP context, this deters photo-of-screen leaks and provides identifying evidence if a leak occurs.
Yes. On-screen watermarking is a current Anexet capability, configured through the same DLP policy layer as other data protection rules in the Client Console.
No. The security team specifies exactly which desktop applications and websites trigger the overlay — every other screen stays unaffected.
Ask the Scinero team to confirm availability for your chosen plan during the demo. Pricing is always individual.
No. The overlay applies at the display layer only, without altering the underlying document, file, or application data.
Yes. Anexet is deployed on-premise; the vendor has no access to your data. All intercepted communications and policy configurations remain inside your infrastructure. Scinero Software Limited has no visibility into your organization's data at any time.
Yes, as one layer among several. On-screen watermarking supports internal data handling policies by making confidential information harder to leak via photography, and it helps you comply with internal security policies and relevant regulatory frameworks. Anexet does not hold compliance certifications itself.
No — the watermark is visible to the employee, not hidden. It functions as a transparency mechanism: the employee can see they are working with data the organization has flagged as sensitive, which is why it fits data-protection expectations in the EU without raising the concerns that covert monitoring would.
Tell us about the sensitive applications and user groups you need to protect — we'll arrange a demo or a free trial of Anexet Ultimate.
