GB
Start 30-day trial

ClearScreen

UK endpoint web blocks
without the black box.

Blocks risky domains locally, shows the reason on device, and logs it for Console review.

Start 30-day trial Book a demo See a live demo

30 days free. Stripe asks for a card; it is not charged unless you switch billing on.

Spot Cloud B.V. · KvK 89708873 · VAT NL865071536B01 · Netherlands · DPA · Security

UK GDPR · NIS Regulations

fig. 1 · The ClearScreen app

Silent recording of the ClearScreen app on a test workspace with sample data. It shows the block page on a test device and a review request sent from it, the Console dashboard with the block feed, the request marked allowed in the review queue, and a domain added to the blocklist, between title cards that read “EU endpoint web blocks without the black box.” and “Start 30-day trial”.

Capabilities

The policy loop is visible from device to Console.

Local block page

Blocked DNS queries sinkhole to 127.0.0.1 with the domain, category, and source feed on screen. On Linux, a blocked HTTPS site may show a browser certificate warning instead of the block page.

False-positive review

Users submit a review request from the block page; Console operators decide with the original policy reason attached.

  • Category policies

    Block UT1 content categories per Environment — adult, gambling, malware, AI chat tools, and more.

  • Allow and block lists

    Tenant-wide allowlists override category blocks; blocklists add domains on top of threat feeds.

  • Threat indicator feeds

    URLhaus and OpenPhish domains ship in an ed25519-signed bundle refreshed every 15 minutes.

  • Device reporting

    Every block writes a JSONL audit record on the endpoint and posts to the Console block feed in managed mode.

From trial to first block.

What you do after you start a trial. The screenshots come from current builds of the checkout, the Console and the block page, for a made-up company, Kestrel Freight.

  1. Start the trial

    Enter your work email and company on the Spot Suite buy page, choose where your data is stored, then add a card at Stripe checkout.

  2. Wait for setup

    Setup takes about 5 to 10 minutes; it took 7 in our test. The welcome email with your sign-in link arrives right after checkout.

  3. Sign in

    Open the link in the welcome email and sign in to the Console with your Spot Suite account.

  4. Install the agent

    Rotate the enrollment key, download the Windows or Linux agent, and run the install command on each computer.

  5. See your computers

    Each enrolled computer appears under Devices with its name, platform, last check-in and number of blocks.

  6. Choose what to block

    Malware, phishing, botnets and stalkerware are always blocked. Tick extra categories such as gambling, online games or AI chat. Computers pick up the change at their next policy refresh, every 15 minutes by default.

  7. Users see why

    A blocked site shows a block page with your company name and the reason, and the user can ask IT to review it from there. On Linux, a blocked HTTPS site may show a browser certificate warning instead of the block page.

  8. Watch the dashboard

    The dashboard counts devices, recent blocks and open reviews, and lists each block with the site and the reason.

  9. Review reported blocks

    Review requests wait under Reviews, where you mark each one allowed, reject it or ignore it.

Start 30-day trial

30 days free. Stripe asks for a card; it is not charged unless you switch billing on.

Pricing.

Team €149 / Business from €499 per month, ex. VAT. 30-day trial.

Team

€149 per month

30-day trial (card checkout)

  • Central management plane for up to 100 endpoints
  • Policy, live block reporting, export of the latest 25 audit events, and managed enrollment
Start 30-day trial

Business

from €499 per month

30-day trial (card checkout)

  • Up to 250 endpoints, Intune deployment, and Entra SSO
  • Custom categories
Start 30-day trial Book a demo

Founding offer: 50% off your first 2 paid months after the 30-day trial.

Questions.

  • Where is tenant data stored?

    Policy, block events, and enrollment records live in the shared EU Supabase Postgres project (Paris) for trials and shared data, or in a paid workspace's own Supabase project in the region chosen at purchase. Threat indicator bundles are signed at the edge and pulled by agents. There is no third-party DNS proxy in the path.

  • Does ClearScreen support SSO?

    Yes, on the Business plan: Microsoft Entra ID single sign-on through Spot Suite OIDC at spot-cloud.spot-suite.com. Every plan signs in with a Spot Suite account. Device agents authenticate with per-device enrollment credentials, not user passwords.

  • Do you decrypt TLS traffic?

    No. ClearScreen enforces at DNS only. Blocked domains resolve to a local sinkhole and show a block page — there is no TLS inspection, PAC file, or network gateway in the policy path. On Linux, a blocked HTTPS site may show a browser certificate warning instead of the block page.

  • How does the 30-day trial work?

    Card checkout includes a 30-day free trial per Environment. Invoice billing is available (paid from day one; no trial on invoice). Run managed mode for up to 100 endpoints. Category policy, block reporting, and an export of the latest 25 audit events are included. Convert to Team when you are ready.

Spot Suite

The rest of the suite.

Same Spot Suite login if you already run this one. Card payments share one invoice; pay by invoice bills each product separately. Trials are 30 days; some products are waitlist.

Start with one policy.

Deploy the agent to a pilot fleet, set UT1 categories, and review blocks on device before a wider rollout.

Start 30-day trial Book a demo