Skip to main content

Gatekeeper

The access control web platform from Knight Watch. One console for every door, alarm and camera.

Gatekeeper is product-agnostic by design: it sits on top of the access control you already run. A browser and single sign-on replace three vendor clients and a shared login. Operators see the alarms they are authorized to see, priority on top; live floor plans show every door, gate, elevator and camera as it changes; reports run in the background and tap you on the shoulder when they are ready; badges print from the browser to any printer; and a virtual attendant releases a turnstile lane for the person who forgot their badge — with a written reason, under the operator's own name. Nothing you own is replaced.

Open the deck · Download the PDF

The console​

Alarm on anything. Report on everything.

  • Events are pushed, not polled. Live events, door state, alarms and export progress arrive over WebSockets; grids and floor plans update without a refresh.
  • Alarms you are allowed to see. Alarms are filtered by the operator's authorization to view and acknowledge them, and sorted with priority on top — priority and display text come from a rules table in your own database that you configure. There is no model in the loop. Acknowledge with a comment, and peer operators see the acknowledgement. Alarm sounds follow priority; snooze is available.
  • Alarms fan out to Everbridge, Microsoft Teams, Slack, an SMS gateway or any HTTP endpoint, filtered per subscription by type and priority, with retry and a per-attempt dispatch history.
  • Monitoring with control. Floor plans carry live device state — doors, areas, elevators, inputs, outputs and Salto wireless locks — with lock, unlock, latch, lockout, arm, disarm and output commands from the same screen, permission-gated. Status pages let you compose your own dashboards from status lists, floor plans, cameras, events and muster reports.
  • Cameras where the doors are. Avigilon, Pelco and any RTSP camera, live or recorded, with a joystick and keyboard for PTZ, embedded on floor plans and status pages.
  • Report on anything. Event, user, muster and health reports; a saved event-report builder; exports to Excel, CSV, PDF and JSON. Large exports run in the background, are cancellable, and raise a push notification when they are ready. Every grid is paged on the server.

The virtual attendant​

Someone is at the lobby bank without a badge — a contractor whose card expired, a visitor nobody registered, an employee who left it at home.

  1. Look them up. Photo, badge state and the security message on the record — only the records this operator is scoped to see.
  2. Release, and say why. A door, a turnstile lane or a whole bank. A release that bypasses an access-level or state rule requires an explicit acknowledgement and a written reason.
  3. The gate opens. The record says who. The command goes to your access control under the operator's own session, so the platform's own log names the operator; the release audit keeps the door, the cardholder, the operator, the outcome and the reason. Someone not in the system at all is released through a non-user override session that stamps the record with the override credential, so there is never an unnamed release.

A refused release is a row too, with the reason it was blocked: badge state hold, no access rights, missing override acknowledgement, operator self-release, or the controller rejected it.

Cardholders, badging and permissions​

  • Cardholder editor with photo crop, card numbers, custom fields and assigned access levels; web badge printing from the browser to any printer; bulk actions on filtered cardholders.
  • Access levels bind doors, door groups, floors, elevator groups, menu groups and outputs, each with a schedule; calendar actions schedule door and output changes.
  • The most granular permissions in the estate: operator permissions are read from your access control itself, not re-invented. A table-and-command claim is checked server-side on every endpoint and returns 403 — not a hidden menu. An operator with no role in your access control gets no session.
  • Single sign-on through PingFederate (OpenID Connect) that resolves to an existing operator and fails closed when there is no match. Who is online is shown per site.

Where it fits​

PlatformsProduct-agnostic by design. Gatekeeper sits on top of the access control you already run, reads each operator's own permissions from it, and sends every command back through the platform's own service under that operator — your access control stays the authority. The vendor module behind the doors is one layer: Schneider Electric EcoStruxure Security Expert is the module built today; Lenel OnGuard is next.
VideoAvigilon, Pelco and any RTSP camera. No intercom or call-box integration, no video talk-down, no person-of-interest analytics.
Multi-siteSites with per-site scoping, controller status, and a site switcher for operators who cover more than one.
DeploymentYour own Windows Server and SQL Server, deployed by your IT from a versioned release package. Vendor databases stay vendor-owned; Gatekeeper's tables live in their own database. Coexists with the legacy client through cutover, with a documented rollback.
Status, plainly

Gatekeeper is built and code-complete with automated test coverage; record-group scoping was verified end to end against a live enterprise estate on 12 August 2026. It is not yet released to production at a customer. Support coverage is set by the agreement you sign; no uptime figure and no response-time promise appears anywhere in this material. Where a vendor product is named, it is named because we integrate with it — not to imply a partnership, certification or endorsement.

See it on your own estate​

Book a thirty-minute demo. We will walk one alarm from the panel to the acknowledgement, and one release from lookup to audit row — on your access control, with your operators' roles — and tell you plainly what would have to be built for your estate. knightwatch.net

Knight Watch installs and services access control estates as an integrator; the people who wrote the release call know what a turnstile bank does at the panel.