WebStream enables organisations and ISVs to run forms-based, database-driven Windows applications in a browser while enforcing strict control over file access, printing, clipboard use, identity, and full audit visibility.
architecture-beta
group g_user(internet)[User]
service browser(internet)[Browser] in g_user
group g_acp(server)[WebStream ACP]
service policy(server)[Policy Identity SSO Audit Trail] in g_acp
group g_runtime(cloud)[App Runtime]
service app(server)[Windows Business App] in g_runtime
junction j1
junction j2
browser:R --> L:j1
j1:R --> L:policy
policy:R --> L:j2
j2:R --> L:app
Control how users interact with legacy applications — not just how they access them.
Across accounting firms, engineering offices, legal practices, medical clinics, and government departments, critical Windows applications prevent cloud adoption.
Users need complex infrastructure just to access their applications, creating security and management overhead.
Applications rely on file open/save dialogs and local printing, incompatible with browser-based delivery.
User activity within the application is invisible to security and compliance teams.
These applications are too complex, too critical, or the source code is no longer available.
Remote work requires workarounds that frustrate users and burden IT teams.
Traditional access methods create attack surfaces and compliance gaps.
"The challenge is not usually the legacy application.
The blocker is the lack of control, governance, configuration, security and the visibility over how your users interact with it."
WebStream virtualises the interaction layer between the user and the Windows application.
Browser-native and policy controlled
Controlled PDF output to designated paths
Governed and monitored transfers
Enforced authentication and access control
Every interaction logged and observable
Start with a single server PoC and scale to enterprise-grade multi-AZ deployments.
architecture-beta
group vpc(cloud)[AWS VPC]
service browser(internet)[Browser] in vpc
service alb(server)[ALB HTTPS] in vpc
service ec2(server)[WebStream Server] in vpc
service s3(disk)[S3 Storage] in vpc
browser:R --> L:alb
alb:R --> L:ec2
ec2:R --> L:s3
WebStream is optimised for forms-driven, document-heavy applications — our natural sweet spot.
App Control Plane — the control and governance layer for legacy Windows business applications running in AWS.
Learn About ACPOpen source engine demonstrating browser-driven file handling, print redirection, and clipboard integration.
View on GitHubThe WebStream Ops MCP Server connects any AI agent to 48 admin and observability tools via the open Model Context Protocol. Ask questions, run audits, onboard users, and generate reports — all in plain English.
"Show me all active sessions" — real-time monitoring, health checks, and performance insights through conversation.
"Run a compliance audit" — continuous governance, MFA gap detection, access reviews, and anomaly flagging on demand.
"Onboard user jsmith to the Designers group" — user lifecycle, group management, and workspace access in seconds.
WebStream is purpose-built for delivering legacy Windows business applications in the browser — with control over file access, printing, clipboard, identity, and audit visibility.
Many platforms can stream desktops or apps. WebStream is designed specifically for forms-based, database-driven Windows applications where governance, workflow control, and browser access matter most.
Not just another VDI platform. Not just another remote access tool. Not just another container workspace.
WebStream is a focused modernisation layer for legacy Windows applications that need to work securely in the browser.
Citrix is built for enterprise virtualisation at scale. Amazon WorkSpaces is built for managed desktop and application streaming on AWS. Thinfinity is built for remote access, RemoteApp publishing, and web-enablement. Kasm is built for containerised browser workspaces and isolation use cases. WebStream is built for governed browser delivery of legacy Windows business applications.
Best known for enterprise virtual apps and desktops at scale.
A mature virtualisation platform with extensive policy, infrastructure, and multi-component delivery architecture designed for large-scale desktop and application estates.
WebStream delivers individual legacy Windows business apps to the browser without a full virtualisation programme. Policy-driven file access, print routing, clipboard control, and per-user audit trails are built in — not bolted on. Pay by session hours, not rigid monthly infrastructure overhead.
Choose Citrix for broad enterprise virtualisation strategy.
Choose WebStream for focused, pay-per-use modernisation of specific Windows business apps. Prove it in a PoC.
Best known for browser-based remote access, RemoteApp delivery, and Windows app web-enablement.
Pure HTML5 clientless delivery, RemoteApp publishing, and VirtualUI-based transformation of Windows applications for browser use.
WebStream is built for ISVs and enterprises who need to transform Windows applications into secure, governed SaaS deployments. Per-user file access policies, print routing rules, clipboard restrictions, and full audit visibility are configurable per application — with Open Source options available through WebStream Core. Session-hour pricing means you pay for usage, not infrastructure.
Choose Thinfinity for broad browser-based publishing and web-enablement tooling.
Choose WebStream for ISV-ready SaaS transformation with built-in governance and pay-per-use pricing. Prove it in a PoC.
Best known for managed desktop and application streaming on AWS.
Fully managed application streaming and desktop services with AWS-native scaling, fleet management, and operations integration.
WebStream runs on AWS and adds the governance layer that WorkSpaces does not provide out of the box. Configure file access policies, print routing, clipboard rules, and identity controls per user and per application — without deep Windows OS administration skills. Session-hour pricing aligns cost to actual usage rather than always-on desktop infrastructure.
Choose AWS WorkSpaces for full AWS-managed end-user computing services.
Choose WebStream to add governed legacy app access on top of your AWS investment. Prove it in a PoC.
Best known for containerised browser workspaces, secure browsing, and disposable work environments.
Browser-delivered disposable container workspaces for isolation, secure browsing, and container-based access models.
WebStream provides clean-slate Windows sessions for real Windows business applications — each session starts with a reset user profile, clean registry, and per-session NTFS access controls. Native dialogs, print flows, and document handling included. No container expertise required. No RDP protocol exposure. Per-user governance policies for file access, printing, clipboard, and identity are configured through the control plane, not at the OS level. Session-hour pricing keeps costs tied to actual usage.
Choose Kasm for container-based workspace isolation and secure browsing.
Choose WebStream for governed, clean-slate Windows sessions running real business apps in the browser. Prove it in a PoC.
Designed for real Windows applications rather than generic desktops or workspaces.
Browser delivery with explicit control over file access, printing, clipboard use, identity, and audit visibility.
Optimised for forms-based, database-driven application workflows where replacing or rewriting the application is not practical.
When the goal is application access, not a full desktop transformation, WebStream provides a cleaner path forward.
WebStream is not trying to replace every VDI, DaaS, or workspace platform. It is built for a more specific and high-value problem: delivering legacy Windows business applications in the browser with the governance controls enterprises need.