GATEKEEPER  ·  What it is 01 / 05

ACCESS CONTROL WEB PLATFORM

Gatekeeper, the access control web platform from Knight Watch. One console for every door, alarm and camera.

Product-agnostic by design: it sits on top of the access control you already run — a browser, single sign-on, live floor plans, alarms you are allowed to see, reports on anything, badge printing, and a virtual attendant. Nothing you own is replaced.

TODAYACCESS CLIENTVIDEO CLIENTALARM PANELthree clients, three logins, one chairshared loginon the monitorOVERRIDE LOG“let the contractor in, 14:10, radio”who opened the door? the log says: the service accountWITH GATEKEEPERGATEKEEPER · PLANT 2Signed in with single sign-on · 4 operators onlineLOBBY BANKDOCKLINE 2STORESDOCK 4 · LIVELIVE ⟷ RECORDEDLOBBY · RECLIVE ⟷ RECORDEDACTIVE ALARMS · YOURS TO SEEPRIORITY 1Forced door — Dock 4just nowPRIORITY 2Door held open — Line 2 east2 minPRIORITY 3Controller offline — Stores9 minAcknowledge with a comment…Acknowledge31120One browser. One sign-in. Every door, alarm and camera.And the audit names the operator who opened the door — not a shared account.One console over the access control you already run. Nothing you own is replaced.Gatekeeper sits on top of your access control platform and enforces its own permission model — the platform stays the authority on who may do what.
Product-agnostic by design. Knight Watch installs and services the access control underneath it. 01 BEFORE AND AFTER
GATEKEEPER  ·  Live, alarms, video, reports 02 / 05

THE CONSOLE

Alarm on anything. Report on everything.

Events are pushed, not polled. Operators see the alarms they are authorized to see, priority on top. Big exports run in the background and tap you on the shoulder when they are ready.

GATEKEEPER · PLANT 2Signed in with single sign-on · 4 operators onlineLOBBY BANKDOCKLINE 2STORESDOCK 4 · LIVELIVE ⟷ RECORDEDLOBBY · RECLIVE ⟷ RECORDEDACTIVE ALARMS · YOURS TO SEEPRIORITY 1Forced door — Dock 4just nowPRIORITY 2Door held open — Line 2 east2 minPRIORITY 3Controller offline — Stores9 minAcknowledge with a comment…AcknowledgeACTIVE ALARMS3OVERRIDES APPLIED1RELEASES TODAY12DOORS IN LOCKDOWN0Live state on the planDoors, areas, elevators, inputs, outputs andwireless locks, pushed the moment theychange. No polling.Cameras where the doors areAvigilon, Pelco or any RTSP camera, live orrecorded, with a joystick for PTZ — on theplan, not in another app.Alarms you are allowed to seeRouted by the operator's authorization,priority on top from a rules table youconfigure, acknowledged with a comment.Report on anything. Export in the background.Event, user, muster and health reports; Excel,CSV, PDF, JSON; a push notification when thebig one is ready.
Alarm priority is a rules table in your own database, configured by you — there is no model in the loop. Alarms fan out to Everbridge, Microsoft Teams, Slack, an SMS gateway or any HTTP endpoint, with retry and a per-attempt history. 02 THE CONSOLE
GATEKEEPER  ·  Lookup, release, audit 03 / 05

THE VIRTUAL ATTENDANT

Forgot the badge? The attendant is a click, and it is audited.

Look the person up, release the lane, say why. Your access control's own log names the operator; the release audit keeps the reason.

no badgeSomeone is at the lobby bankA contractor whose card expired, a visitor nobody registered,an employee who left their badge at home.CARDHOLDER LOOKUPcontractor · “forgot my badge”CONTRACT EXPIREDSECURITY MESSAGEEscort required in Stores after 18:00Look them upPhoto, badge state, and the security message on the record.Only the records this operator is scoped to see.Release · Lobby bank, lane 2This release bypasses a rule. Say why.Contractor renewal signed this morning,not yet in the system. Escorted by the host.I acknowledge this overrideReleaseRelease, and say whyA door, a turnstile lane or a whole bank. A release that bypassesa rule needs an acknowledgement and a written reason.The gate opens. The record says who.The command goes to your access control under the operator's ownsession, stamped with the override credential, not a service account.DOORLobby bank · lane 2CARDHOLDERoverride credentialOPERATORsigned-in operatorOUTCOMEGranted · overrideREASONContractor renewal signed…A refused release is a row too — with the reason it was blocked: badge state hold, no access rights, missing override acknowledgement, operator self-release, or the controller said no.A guard at every turnstile, without a guard at every turnstile.One operator, one console, any lane on the estate they are authorized to see — and every decision, granted or refused, written down with a reason.
Someone not in the system at all — an emergency, an unregistered visitor — is released through a non-user override session that stamps the record with the override credential, so there is never an unnamed release. 03 THE VIRTUAL ATTENDANT
GATEKEEPER  ·  In the box 04 / 05

THE FEATURE LIST

Everything the control room needs. Nothing you have to replace.

Live and alarms

Events pushed over WebSockets, never polled Alarms filtered by the operator's authorization Priority on top, from a rules table you configure Acknowledge with a comment; peers see it Alarm sounds by priority, snooze Saved event filters; searchable, column-configurable

Monitoring and video

Floor plans with live device state Doors, areas, elevators, inputs, outputs, Salto locks Cameras: Avigilon, Pelco, any RTSP Live ⟷ recorded toggle, PTZ joystick Status pages you compose Controller status and system health

Reports and exports

Event, user, muster and health reports Event report builder, saved Excel, CSV, PDF, JSON Large exports run in the background Push notification when it is ready Server-side paging on every grid

Cardholders and badging

Cardholder editor with photo crop Web badge printing to any printer Bulk actions on filtered cardholders Access levels with a schedule per resource Custom fields and custom objects Calendar actions for scheduled doors and outputs

Permissions and sign-in

Operator permissions read from your access control, not re-invented Table and command claims checked on every endpoint 403, not a hidden menu PingFederate single sign-on, fails closed No operator role in your access control, no session Who is online, per site

For IT

Multi-site, with per-site scoping Your own Windows Server and SQL Server A release package your IT deploys Coexists with the legacy client through cutover Health status and preset matrix Your logo and branding at runtime
Not included today: Lenel OnGuard (planned), intercom and call-box integration, video talk-down, person-of-interest analytics. 04 THE FEATURE LIST
GATEKEEPER  ·  Fit and next step 05 / 05

HOW YOU BUY IT

Where it fits, and how to start.

30 min
One alarm and one release, on your own estate

We walk one alarm from the panel to the acknowledgement and one release from lookup to audit row — on your access control, with your operators' roles — then scope the rest: your sites, your cameras, your alarm priorities, your rollout.

  • Assessment: your access control platform and version, your sites, your operator roles, your cameras
  • Pilot on one site, alongside your existing console; the legacy client stays as fallback
  • Rollout site by site, deployed by your IT from a release package on your own servers
  • Vendor databases stay vendor-owned; our tables live in their own database
  • Support coverage set in the agreement you sign
Status, plainly: built and code-complete with automated test coverage, verified against a live enterprise estate on 12 August 2026, not yet released to production at a customer. No uptime figure or response-time promise appears in this material.
Platforms
Product-agnostic by design. Gatekeeper sits on top of the access control you already run, reads each operator's own permissions from it, and sends every command back through the platform's own service under that operator — your access control stays the authority. The vendor module behind the doors is one layer: Schneider Electric EcoStruxure Security Expert is the module built today; Lenel OnGuard is next.
Video
Avigilon, Pelco and any RTSP camera, live or recorded, with PTZ, on floor plans and status pages. No intercom or talk-down integration, and no person-of-interest analytics.
Who builds it
An integrator, not a software house. Knight Watch installs and services access control estates. The people who wrote the release call know what a turnstile bank does at the panel — which is why a refused release is a row and not a silence.
See it on your own estate
Book a thirty-minute demo. We will walk one alarm from the panel to the acknowledgement, and one release from lookup to audit row — and tell you plainly what would have to be built for your estate. knightwatch.net
Support coverage is set in the agreement you sign. Where a vendor product is named, it is because we integrate with it — not to imply a partnership, certification or endorsement. 05 HOW TO START