What is bossware? Are you being monitored at work?

What is bossware? Whether you’re working from home or using a computer at work, your boss could be watching. Employee monitoring software can enable screen sharing, keylogging, remote monitoring, and more.

Since the pandemic, employee productivity tools and time tracking software have become increasingly common. For some employees, bossware has evolved into full-blown work surveillance, resulting in significant privacy concerns.

Employers now have tools to track everything from your keyboard activity and browsing history to webcam feeds and workplace apps like Slack, Microsoft Office, and Zoom. Employee monitoring tools often come preloaded in device management profiles, mobile device management (MDM) suites, and remote sharing applications.

Knowing whether you are affected can be hard. Admin restrictions can make employee surveillance tools hard to spot. Tracking software doesn’t always appear in your task manager or activity monitor, especially if it has been installed covertly onto work machines.

In this guide, we’ll show you how to detect bossware on a corporate laptop. We’ll explain how to check netstat, how to scan for browser extensions, and how to use antispyware tools to check for bossware.

Bossware explained: How employee monitoring software works

Bossware is a type of tracking software designed to track employee productivity. It allows businesses to monitor remote workers, providing the means to check that workers are staying on top of their responsibilities, even if they are out of the office.

Although workplace trust is important, a growing number of businesses are realising that accountability for remote employees is a necessary evil. Fortunately, if used transparently, workplace tracking doesn’t have to violate your privacy.

Task managers like Smartsheet, Trello, Teamwork, Jira, and Wrike allow businesses to track and manage workflow, without the need for overreaching spyware. Unfortunately, Evidence suggests that many companies are graduating from these tools to full-blown surveillance.

Under the worst circumstances, this leads to the digital panopticon effect, where employees feel they are constantly being watched.

Studies have revealed the negative impact of bossware on psychological well-being, as well as a direct correlation between bossware and employee burnout. This makes it critical for employers to carefully consider the types of tracking they use.

Tattleware, trust, and tracking: What bossware says about your employer

Whether you are a remote worker or the owner of a small business, it is important to understand whether bossware is legal on employer-owned devices.

There is no doubt that providing some level of oversight for employees can help to manage expectations and set boundaries. However, overstepping into direct surveillance may lead to legal consequences or a loss of reputation on employer review websites like Glassdoor.

In this guide, we’ve broken down the rules so you can understand the risks associated with bossware. We will discuss employee consent, data protection laws like CCPA and GDPR, and the nuances of one-party vs. all-party consent laws.

Keep reading to learn why work-life balance is important, and how bossware can negatively affect workplace trust.

What does bossware track and collect?

Employee surveillance tools are becoming increasingly invasive, allowing employers to track everything that their employees do on a business-owned computer or mobile device. In some rare cases, employers will even insist that workers install tracking software onto their own machines.

Some of the most common types of tracking caused by bossware include:

• Time tracking: Automatically logs how long employees spend on work tasks, breaks, and idle periods.
• Performance dashboards: Translates raw data into clear, visual reports showing each employee’s productivity.
• Screen capture: Grabs periodic screenshots or video recordings of everything displayed on the user’s monitor.
• Keystroke logging: Records every key press—including deleted entries—across the system.
• Audio capture: Records sound through the device’s microphone.
• GPS/location monitoring: Tracks and logs the physical whereabouts of company devices.
• Email & chat logging: Archives all input in email clients and instant-messaging apps.
• Browser history capture: Keeps a complete record of visited websites, even in private/incognito modes.
• Web & app usage monitoring: Shows which websites and applications are in use, when, and for how long.
• Alerts & policy warnings: Notifies administrators when predefined triggers occur and warns users of policy breaches.
• Remote device control: Gives admins full, remote access to an end user’s computer as if they were sitting at it.

As you can see, some of this employee tracking can be invasive, which is why privacy experts have raised the alarm. For example, your employer could use keystroke logging to capture passwords, which could create cybersecurity and privacy concerns.

The good news? There are things you can do to minimise the risks associated with bossware and other corporate spyware applications.

Can my boss listen to me through my computer?

This depends on the type of employee monitoring tools that your boss is using.

Generally speaking, it is rare for employers to listen to employees via the microphone on a computer or mobile device. However, there is evidence that some businesses are using tools that enable this type of surveillance.

This makes it essential for remote workers, and even employees working in an office, to understand what kind of tracking is occurring on their work devices. The best place to start is by asking your employer to disclose what kind of employee tracking software is being used.

If you are concerned that your boss is listening to you via the microphone on your computer, this could be a breach of your worker rights. In the US, for example, the federal Electronic Communications Privacy Act (ECPA) makes it illegal to intercept or record oral communications without the consent of at least one party.

Some US states go further by requiring all-party (“two-party”) consent before any audio recording can take place. Just bear in mind that the level of privacy protection and limits on surveillance will vary based on local state laws, so you should check local laws to see where you stand.

Video surveillance is generally restricted to areas where employees do not have a reasonable expectation of privacy. For instance, it is illegal to install hidden cameras in restrooms or locker rooms. However, cameras may be placed in other public office areas to prevent theft.

Varying worker protections mean that employers may need to disclose and obtain consent before using microphones or cameras to monitor you. However, this is not always the case, so we strongly recommend checking local laws to see how you are affected.

What are the best practices for avoiding tracking via bossware?

Bossware can only track what you do, which is why the best way to prevent unwanted tracking is to simply perform sensitive personal and non-work tasks on another device. We strongly recommend that you always stick to doing personal activities on a personal device that is not used for work.

Here are some additional best practices to help protect your privacy:

• Use a VPN and personal device for anything sensitive: Even basic browsing can be visible to your employer if you’re on their network.
• Log out of personal accounts on work hardware: This includes email, banking, social media, and messaging apps.
• Disconnect from the company VPN when not working: This cuts off remote visibility into your internet activity.
• Avoid syncing your phone to your work computer: Especially if mobile device management (MDM) is enabled.
• Never use company devices for personal file storage: Back up your personal data to a secure cloud or USB, not your work machine.
• Clear browser data regularly: However, remember that some bossware extensions bypass this and still log browsing behavior.
• Use a privacy-respecting browser: If permitted, use Firefox or Brave with privacy extensions instead of Chrome.

By paying closer attention to the devices you use, and ensuring you use different devices for work and personal activities, you’ll make it much harder for bossware to follow you into your personal life.

How to detect bossware on your work device

The first thing is to monitor for signs of remote desktop access. If the company you are working for is able to track you, they may also be able to remotely control your computer to snoop through its contents. If you notice any of the following symptoms, this could be a sign that you are being watched using bossware:

• Unexpected cursor movements
• Delayed input when you press the mouse or type
• Suspicious notifications of screen-sharing or session handoff

Below, we have included other methods you can use to identify bossware:

1. Request to see the company policies regarding employee tracking tools

The best place to start is by asking your employer whether you are being monitored. Businesses understand that intelligent employees want to know how their work is tracked. That’s why it’s always better to offer transparency up front.

The best companies will have an official policy outlining monitoring practices. You can ask to see this policy before signing your employment contract. Also check whether you’ve agreed to any device-use terms, consent notices, or mobile device management (MDM) profiles.

Requesting transparency forces the company to fill any policy gaps and keeps everyone on the same page. Remember: A lack of information is not always caused by deceptive business practices or a will to perform highly invasive surveillance; it could just be an oversight. This is why it is always a good idea to enter into an open conversation with the company’s HR or management.

If you have already asked for information about the kind of employee tracking or bossware that is used, and you feel that you have not received a straight answer, you can use the steps below to figure out what is going on:

2. Behavioral clues or workplace changes

One of the biggest giveaways of covert monitoring is when colleagues or managers start referencing details about your work that you never shared—like exactly how long you spent on a task, a draft you were editing, or a private chat you sent.

If someone at work makes a suspicious comment like: “I saw you on that spreadsheet late last night” or asks questions about conversations that should have been private, it may signal that bossware is secretly tracking your keystrokes, screenshots, microphone, or chat logs in real time.

If you notice any subtle signs that you are being tracked, we recommend that you:

• Ask for clarification: Politely raise the issue with your manager or HR and request to see the company’s official monitoring policy.
• Audit your device: Look in Task Manager (or Activity Monitor on Mac) for unfamiliar processes. Also review installed applications (check your program files folder) for anything you don’t recognize or didn’t authorize.
• Check company policies and user agreements. Revisit any device-use agreements, MDM profiles, or privacy notices you’ve signed. These should explain what tools are being used and for what reasons. (A device use agreement is a document you may have signed during onboarding for the job. It is a legal document that stipulates that you must follow company rules – potentially including allowing yourself to be tracked when you use company devices.)

3. Check your task manager or activity monitor

Monitoring tools often run as background services. This provides an opportunity for you to uncover whether a program is tracking you.

To check whether anything unusual is running on your computer, start by opening your Task Manager (Windows) or Activity Monitor (macOS). Here, you can scan the list of active programs and services for unfamiliar processes that are known to be tied to bossware.

Watch for these well-known bossware processes:

• WorkforceAgent.exe (Workforce.com)
• Hubstaff.exe (Hubstaff)
• TeramindAgent.exe (Teramind)
• ActivTrak.exe (ActivTrak)
• TimeDoctor.exe (Time Doctor)
• RescueTime.exe (RescueTime)
• VeriatoService.exe (Veriato, formerly Spector 360)
• StaffCopService.exe (StaffCop)
• DeskTime.exe (DeskTime)
• TimeCamp.exe (TimeCamp)
• WorkpulsService.exe (Workpuls)
• Kickidler.exe (Kickidler)
• SentryPCService.exe (SentryPC)
• ManicTime.exe (ManicTime)
• InterGuardService.exe (InterGuard)
• eBLVDService.exe (eBLVD Activity Monitor)
• BrowseReporter.exe (BrowseReporter)
• SoftActivityMonitor.exe (SoftActivity Monitor)
• Controlio.exe (Controlio)
• ObserveIT.exe (ObserveIT)

If you spot any of these, or any other suspicious processes you don’t recognize, we recommend searching for that process using Google. This will help you to identify the process and figure out whether it’s critical system software or a potential surveillance tool.

Any programs running with high CPU usage or persistent network connections are worth paying extra attention to.

4. Use command-line tools to spot hidden connections

If checking for unwanted programs or processes doesn’t bear any fruit, it is a good idea to check for hidden connections, or apps that are sending data across the internet. Tracking programs may send data back to your employer, which means that you should be able to detect traffic leaving your machine and communicating with company servers.

The easiest and best way to check whether an application is “phoning home” is to use Netstat. Netstat is a free tool built into Windows (and macOS/Linux) that lists every program on your computer making an Internet connection. By running it, you can spot any unfamiliar outbound connections.

How to check with netstat

1. Open Command Prompt as Administrator
2. Click Start, type cmd, then right-click Command Prompt > Run as administrator. (You need admin rights so netstat can show program names.)
3. Run the netstat command
4. In the Command Prompt window, type: netstat -b -n (The -b flag shows the executable, and -n skips DNS lookups). On macOS/Linux, use netstat -p or lsof -i instead, as -b is not supported.
5. Press Enter.

That’s it! Netstat will list every outbound connection alongside its executable name. Jot down any entries you don’t recognize (both the .exe and the remote IP) and Google them to see whether they’re harmless or a potential monitoring tool.

Considerations regarding outbound connections

Bear in mind that some familiar programs (Dropbox, OneDrive, antivirus updaters, etc.) will legitimately “phone home,” so you shouldn’t freak out over every network connection. Instead, consider each connection, and rule out any legitimate apps that are harmless.

Note: Any suspicious applications that are sending data over the internet could turn out to be a malware infection. Dangerous spyware variants such as Remote Access Trojans (RATs) communicate directly with Command and Control (CnC) servers controlled by hackers.

What you discover could be either bossware or a more dangerous malware infection (like a RAT). Always research unfamiliar executables before jumping to conclusions.

5. Check for browser extensions and startup items

Tracking software can hide in your browser as an extension or slip into your computer’s startup routine. By removing any browser extensions or startup programs you didn’t install yourself, you can reduce the possibility of unwanted tracking.

Remember that on locked-down work machines, you might lack permission to uninstall apps or change startup items. This means you might be able to spot bossware but not have the rights to disable it.

The good news is that even on computers with locked-down permissions, users can usually control the browser extensions without too much trouble. Thus, if you discover any unusual extensions you believe might be causing tracking, you should be able to remove these from Chrome or Firefox.

How to check your browser extensions:

Chrome

1. Click the three-dot menu > More tools > Extensions
2. Scan the list.
3. Remove or Disable any extension you don’t recognize or need.

Firefox

1. Click the three-bar menu > Add-ons and themes > Extensions
2. Review each name and publisher.
3. Click … next to any unrecognized extension > Remove.

Edge

1. Click the three-dot menu > Extensions
2. View Installed extensions.
3. Toggle off or click Remove for anything you didn’t add.

Safari (macOS)

1. Safari > Preferences > Extensions
2. Uncheck or click Uninstall for any you didn’t add.

How to disable unwanted startup items

Tracking tools often configure themselves to launch automatically every time you turn on your computer. Disabling them here stops them from loading on startup. Just bear in mind that you may not be able to change these settings if you have locked down permissions on the work computer.

Windows Task Manager

1. Press Ctrl + Shift + Esc > Startup tab
2. Sort by Status to see what’s enabled.
3. Right-click any item you didn’t install > Disable.

macOS Login Items

1. Apple menu > System Settings (or System Preferences) > General > Login Items
2. Under Open at Login, select any app you didn’t authorize > click – to remove.

6. Run antispyware or endpoint detection tools

The fastest way to uncover and remove hidden tracking software is with a dedicated anti-spyware or endpoint-detection scanner.

These tools flag known bossware executables, backdoor services, and stealthy spyware. On your own machine, they’ll often catch anything that slipped past Task Manager or Netstat.

Note: On a locked-down work PC, corporate whitelisting may hide legitimate “bossware,” so this method may not reveal everything on a company machine. But if you’re a freelancer on your own device, it’s very effective at identifying unwanted tracking software you may have unknowingly installed.

Recommended tools to spot bossware:

• Malwarebytes
• ESET
• Spybot Search & Destroy
• Windows Defender (Defender ATP): Built into Windows 10/11
• Bitdefender Free Edition
• Sophos Home (free tier)
• SentinelOne Falcon or CrowdStrike Falcon (enterprise EDR trials)
• RogueKiller: rootkit & stealth‐malware specialist

We recommend that you run both a Quick and a Full/Deep scan. If you suspect your company’s AV is whitelisting bossware, boot from a rescue USB (for example, Malwarebytes’ Windows PE) and scan outside the OS.

What should I do if I find bossware on my machine?

1. Note the executable name, path, and any remote IP.
2. Google them to confirm whether they’re harmless or surveillance tools.
3. On your personal device: quarantine or uninstall.
4. On a company PC: Document your findings and raise them with IT/HR.

Remember that depending on your location, there may be labor or privacy laws that limit or require disclosure of employee monitoring. Mentioning these legal requirements can strengthen your request for transparency, so be sure to check your rights.

Note that if you are using a work computer, you shouldn’t necessarily remove bossware after finding it. Tampering with a work device can violate company policies and raise red flags with IT. For this reason, you should discuss your findings with your company rather than removing it yourself.

You can ask HR or IT directly:

• What’s being monitored?
• Is it active outside work hours?
• Who sees the data?

If you’re still worried, log future incidents. You can save screenshots or timestamps of suspicious behavior or unexplained activity. If conversations with HR don’t resolve your concerns and you believe your privacy is being violated, consider seeking legal advice.

Which US states require notice for bossware?

Only three US states currently require employers to notify workers about the use of tracking software. In all other states, companies can legally monitor employee activity on work devices without notice or consent. This includes logging keystrokes, monitoring emails and apps, and in some cases, accessing microphones or webcams.

Here are the states where bossware disclosure is required:

• Connecticut: Employers must post a clear electronic monitoring notice and obtain employee acknowledgment before monitoring begins.
• Delaware: Under the state’s Electronic Monitoring Act, employers must provide written notice to affected employees before tracking emails, voice calls, or other transmissions.
• New York: Since May 7, 2022, employers must issue written notice before monitoring internet use, phone calls, or emails. A signed acknowledgment is also required.

Which countries allow unrestricted employee surveillance?

Unfortunately, in most countries around the world, the use of surveillance tools is allowed on company devices. Even in the US, where some states require consent for audio and video recordings, businesses can still freely track, screenshot, and key-log employees on their network.

Even if you use your own device (personal laptop, smartphone, or tablet) to connect to the office wifi, the network admin can still monitor which domains you visit. This is why it’s essential to use a VPN to conceal your activities whenever you use a wifi hotspot: The wifi owner always has the ability to track your web habits.

The potential for surveillance increases for people living in authoritarian regimes. Countries like China, Russia, the UAE, and Saudi Arabia have no restrictions on bossware. In these countries, corporations and government agencies are permitted to conduct unrestricted surveillance.

Other countries known for weak workplace privacy protections include:

• India: No comprehensive federal privacy law; workplace monitoring is largely unregulated.
• Turkey: Government surveillance is widespread, with little restriction on employer tracking.
• Vietnam: Employers can monitor employee activity without notice or consent.
• Iran: Surveillance tools are heavily used by both employers and the government.
• Egypt: Lacks employee monitoring laws; state-level surveillance is normalized.
• Belarus: Internet surveillance is extensive, with no meaningful oversight or restrictions.

Key takeaway: Unless your country has workplace privacy or data protection laws in place (for instance, GDPR in the EU or workplace surveillance acts in parts of Australia), the default is: Employer’s device, employer’s rules. For this reason, we strongly recommend that you conduct sensitive personal activities on your own devices and with the added protection of a VPN.

Which countries offer privacy protections for employees?

Bossware is legal in most countries, with a few exceptions:

• European Union: Under GDPR, employers must have a lawful basis (legitimate interest) to perform employee surveillance. Tracking and bossware use is only legal if employees are informed and it’s “necessary and proportionate” to business needs.
• Some Australian States: New South Wales and Victoria require that employees be told when video or GPS tracking is in use. Rules vary by state, so check local laws.
• Canadian Provinces: PIPEDA allows monitoring for legitimate business needs but mandates transparency and limits on retention. Rules vary by province, so check local laws.

Unless you are in one of these countries/states/provinces, you must understand the level of surveillance you could be exposed to. This will ensure that you always act accordingly when using company devices.

Can a VPN prevent tracking at work?

This depends on the type of tracking that is occurring. If you are concerned that your web visits are being tracked when you use personal devices on the work wifi, you should use a VPN.

A VPN provides you with an encrypted connection that makes it impossible for the work network’s administrator to track your website visits. This allows you to bypass network blocks to use social media, YouTube, Reddit, Twitch, Discord, or any other website or service that has been blocked by your employer, with complete privacy.

However, keep in mind that a VPN only protects your web traffic. It won’t prevent local tracking such as keystroke logging, screen captures, or app usage if bossware is running on your device.

Can bossware be beneficial for employees?

Yes. Although bossware often gets a bad rap, some oversight can actually make workplaces fairer and more productive – if used transparently.

As an employee, there’s nothing more frustrating than putting in the hours only to discover colleagues coasting or taking unauthorized breaks. This type of inequity can lead to disgruntled employees, and may even cause a ripple effect that drags down productivity.

When deployed carefully, legitimate monitoring tools can do many helpful things:

1. Highlight top performers and foster a culture of recognition and accountability.
2. Help teams collaborate more efficiently by identifying workflow bottlenecks.
3. Set clear expectations and help underperformers improve – without any annoying micromanagement.
4. Allow employees to view their own data (in ethical tools like Insightful or Timely) to track progress and ensure they are delivering in line with company expectations.

What is toxic productivity?

Studies show that constant surveillance can create a digital panopticon effect where the perception of being watched (even if it is a false belief) is enough to trigger stress, reduce trust, and harm psychological well-being. This kind of work environment is referred to as toxic productivity, and should be avoided to avoid creating a workforce that suffers from burnout.

Is bossware legal?

As long as employee tracking is transparent and lawful, businesses are generally permitted to have oversight over remote employees (as well as those working at the office).

In the US, for example, ECPA allows for legal monitoring of electronic communications like email as long as it’s for legitimate business purposes and done on a work-issued device. This means that if you’re using a company-issued computer or mobile device, the potential for legally-permissible tracking increases significantly.

In the EU, the General Data Protection Regulation (GDPR) also allows for some workplace monitoring. However, European laws require businesses to create clear, transparent policies that inform staff about employee monitoring practices. This ensures that staff are aware of the specific types of monitoring taking place.

Ultimately, the legal situation surrounding the use of bossware will vary depending on where you live. This is why we recommend that you check local laws and regulations. Only then will you fully understand the scope of surveillance you may be exposed to.

I’m struggling to track employee productivity – what should I do?

If you’re a business owner concerned about employee productivity, it’s natural to seek tools that help track what needs doing and what’s been completed each day or week.

Some oversight helps make your workplace fairer for everyone. The best systems help set and manage employee expectations, and ensure that everyone is contributing the same level of effort.

It creates fairness without resorting to overt surveillance that may leave employees feeling uncomfortable, or even psychologically unwell.

If you want to make your business fairer and gain oversight over which employees are performing better than others, you can consider the following methods:

• Project management software: Use tools like Trello, Asana, ClickUp, or Basecamp to assign tasks, track progress, and keep everyone’s goals aligned. These tools help clarify deliverables without monitoring screens or keystrokes.
• Time blocking or time logging (Voluntary): Tools like Toggl, Clockify, or RescueTime (opt-in version) let employees track their own time usage. This encourages transparency and self-awareness without forcing monitoring.
• Goal-oriented performance reviews: Shift the focus from hours worked to goals achieved. Weekly or bi-weekly check-ins ensure everyone is aligned and deliverables are met, without day-to-day tracking.
• Daily stand-ups or async updates: Use short check-ins via Slack, Zoom, or Loom to share what was done, what’s next, and where help is needed. This builds trust and keeps work visible.
• Transparent workflows in collaboration tools: Platforms like Notion, Google Workspace, or Microsoft Teams let everyone see what’s being worked on in real time, without the need for invasive tracking.
• Output-based KPIs: Instead of measuring time, track outcomes. Who’s hitting milestones, shipping features, closing tickets, or publishing content?
• Employee feedback channels: Give employees a say. Anonymous surveys or open forums help managers understand workflow issues and morale – before the need for surveillance arises.

As an employer, the important thing to remember is that there’s a huge difference between honest goal-setting and over-the-top employee surveillance. The latter can lead to poor workplace culture, unhappy staff, and even employee burnout.

Bossware FAQs