Stolen passwords and account takeover
Someone signs in with a stolen or guessed password.
- Bursts of failed sign-ins on a PC.
Windows PCs
Early access: we set it up with you
A small Ojava agent on each Windows PC watches for ransomware, malware and password-stealing tools, and tells you when something is wrong.
What it catches
Mass downloads and data theft
Many files leave in a short time.
- A USB storage device plugged into a PC.
Ransomware
Files are encrypted and backups removed before a ransom demand.
- Mass file changes and renames, and Windows backups being deleted.
Malware and password-stealing tools
Attack tools run on a PC to steal passwords or open a way in.
- Known attack tools, access to Windows' password store, misused Windows tools and suspicious PowerShell.
Protection switched off
Attackers turn off what would catch them.
- Antivirus or firewall turned off, security logs cleared or logging changed.
Hidden footholds
Attackers make sure they come back after a restart.
- New startup programs, scheduled tasks and services.
Linked attacks
Related warning signs become one incident, so you see the whole story instead of separate alerts.
- For example a sign-in from abroad followed by password-stealing activity on the same person’s PC.
What you need
- Windows 10 or 11Any edition. Works whether or not your business uses Microsoft 365 or Google Workspace.
- An administrator account on each PCNeeded once, to install the agent.
- Early accessWe set it up with you: about 10 minutes for the first PC. The installer is not code-signed yet, so Windows shows a SmartScreen warning and "Unknown publisher"; the setup guide shows what to click.
- PriceCHF 10 / €11 / $13 per PC per month on any plan once Windows billing starts. PCs are not charged during early access.
How you connect it
- Request early access from your dashboard or write to sales@ojava.ch.
- We approve it and email you the steps; Devices then shows Add a Windows PC with the download (a link that works once, with the version and SHA-256 checksum).
- For each PC: Devices → Add a Windows PC, download its setup and run it as an administrator. If you prefer, book a time and we set up the first PC with you.
- The PC shows "Online" in Devices within a few minutes.
What Ojava reads
Windows security events, the names and command lines of programs that start, for files changed in user folders only the folder type and file extension (one example path when many change at once), with the user folder shown as %USERPROFILE%, the addresses of network connections, programs set to start automatically, and the Windows security settings (antivirus, firewall, logging).
What Ojava never reads
The content of documents or emails, browsing history, keystrokes or the screen. During installation the agent switches on Windows' own logging of newly started programs and scheduled tasks, and places two small hidden decoy files in each user’s main folder, Public Documents and a local (not OneDrive) Documents folder: a change to one by anything else gives a critical alert at once (ransomware changes every document it finds), programs that only read files (OneDrive, antivirus, Windows Search) trigger nothing. It changes nothing else.
How quickly alerts arrive
The agent reports every minute, so an alert usually reaches you within a few minutes.
The other sources
Microsoft 365
LiveStolen passwords, failed MFA, mail forwarding, risky app access, new admins and mass downloads. Every business plan; faster with Entra ID P1.
How it worksGoogle Workspace
LiveStolen passwords, failed 2-step verification, mail forwarding, risky app access, new admins and mass Drive downloads. Every business edition from Business Starter (not personal Gmail accounts).
How it works