Overview of Features

Centralized Application and Desktop Delivery

Thinfinity® Workspace allows administrators to manage and deliver applications and desktops from a single, centralized location. This simplifies the process of provisioning, updating, and securing resources, reducing administrative overhead and ensuring consistency across the organization.

ZTNA (Zero Trust Network Access)

Built with security in mind, Thinfinity Workspace provides secure access to applications, desktops, and web resources through secure network architecture while following the PoLP (Principle of Least Access Privilege) of ZTNA. This ensures that all data transmitted between the client device and the server is protected from eavesdropping and tampering, and data can be accessed only by those strictly authorized. Furthermore, the platform supports a variety of authentication schemes, such as Windows AD, OAuth/2, SAML, RADIUS, and Passkeys, including multi-factor authentication (MFA), thus adding an extra layer of security to the login process and safeguarding against unauthorized access.

Remote Browser Isolation (RBI)

Thinfinity Workspace can deliver web access through an isolated browser that runs in a container on a Kubernetes cluster, streaming only a visual representation to the user’s device. Because web content, scripts, and downloads execute on the cluster and never on the endpoint, an entire class of browser-borne threats — malware, drive-by downloads, and malicious scripts — is contained away from the user’s machine. An isolated browser is published like any other connection, through an RBI App Access Profile backed by a Kubernetes model managed in Cloud Manager, with per-profile control over clipboard, file uploads, audio, and display quality.

Natively Browser-Based, No Client-Side Installation Required

Thinfinity Workspace delivers applications and desktops directly to a web browser. Users do not install client-side software on their devices, so resources can be accessed from a wide range of devices, including by users with limited administrative privileges. Because there is no client-side software to distribute or maintain across devices, administration is limited to the server side.

A client-side application is also available for installation on the end-user machine, for users who prefer a native desktop experience. Users who want a native-feel experience without a separate installer can instead install the workspace as a Progressive Web App.

Distributed Architecture and Modular Approach for High Availability and Load Balancing

Thinfinity Workspace is designed for high availability and scalability: each independent, interchangeable component or module focuses on a specific function and is designed to perform specific tasks. Instead of relying on a single central server, the solution supports multiple Gateways and Brokers, enabling administrators to distribute the workload across multiple servers and ensure that the platform remains accessible even in the event of a server failure. Plus, load balancing mechanisms further optimize performance by directing traffic to the least-loaded servers.

Windows Active Directory Integration

Thinfinity Workspace integrates with Windows Active Directory, the dominant standard for user account and permission management on Windows networks.

Remote Resource Booking and RPAM (Remote Privilege Access Management)

Thinfinity Workspace extends beyond simple access and allows for resources to be reserved for access at a specific time. RPAM adds an approval workflow and therefore an extra layer of security on top of RBAC. RPAM secures privileged access to critical systems, ensuring that users can only access the specific resources they need for the precise time they need them.

Managed Cloud Instances and VDI Environments (Cloud Manager)

Cloud Manager — included as part of Thinfinity Workspace — allows administrators to access, create, and manage Virtual Machines (VMs) by hosting desktop environments on a centralized server. Cloud Manager provides comprehensive management capabilities for provisioning, scaling, initiating, terminating, and deallocating virtual machines (VMs) deployed on major cloud service providers, including Microsoft Azure, Amazon Web Services (AWS), Google Cloud Platform (GCP), IONOS, Oracle Cloud Infrastructure, Proxmox Virtual Environment, VMware vSphere, and Microsoft Hyper-V. These operations are accessible through the Thinfinity Workspace Web Manager interface. Additionally, Cloud Manager enables users to remotely access their virtual desktop environments from any endpoint device, irrespective of geographic location.

Application Virtualization with Thinfinity VirtualUI

Thinfinity® VirtualUI, a Thinfinity Workspace component, is a development platform designed to enable the transformation of Windows desktop applications into web-based solutions with minimal code changes. At the core of this technology is a Cybele Software proprietary DLL that developers can integrate directly into an application.