Case study · Enterprise security
Hermes Network 360 Guard
A cross-platform security client unifying SASE, RMM, and XDR across Windows, macOS, iOS, and Android — built for Hermes Networks Inc., San Francisco.
Background
Hermes Networks Inc. (San Francisco) sells SD-WAN and enterprise network-security products. Their 360 Guard line consolidates three traditionally-separate security layers into one product: Secure Access Service Edge (SASE), Remote Monitoring & Management (RMM), and Extended Detection & Response (XDR).
The endpoint client needs to feel like one application — not three glued together — and it needs to work everywhere the workforce does, from corporate Windows boxes to engineers on macOS to a sales rep on a phone in the field.
Scope
Desktop (Windows + macOS). Full SASE / RMM / XDR control surface. Login with username + password, MFA, and SSO via Google, Microsoft, and LinkedIn. Per-service start / stop / deactivate. Real-time connection state — IP address, DNS resolution, last VPN handshake — surfaced live in the UI.
Mobile (iOS + Android). SASE-only client, focused on secure on-the-go access for field workers and remote staff.
Engineering work
Unified authentication layer. One auth surface that supports username + password, MFA (TOTP and push), and three SSO providers. The user sees a single login screen; the client transparently routes credentials to whichever flow the tenant has configured.
Independent service control. Each protection layer is separately licensable. The client surfaces SASE, RMM, and XDR as independent toggles without making the user reason about which Windows/macOS daemon corresponds to which capability. Underneath, the client talks to a host-resident agent that owns the actual transport.
Resilient connection telemetry. IP, DNS, and handshake state remain accurate across network changes — Wi-Fi to LTE to wired — without forcing reauthentication. The status surface persists across reconnects and reflects what the agent actually sees, not what the client wished it saw.
Cross-platform UI parity. Window chrome, login flow, service-control panel, and status surface match across Windows and macOS without forking the codebase. Native primitives win where they matter (system tray, autostart, certificate stores); shared C++/Qt abstractions everywhere else.
Mobile-targeted SASE. The mobile clients aren't shrunken desktop apps — they're focused on the one job mobile workers need (secure tunnel, transparent reconnect, low battery impact) and skip the ops-team surface that doesn't fit a phone.
Outcome
One endpoint client across four platforms with consistent UX, full-feature parity for the desktop tier, and a streamlined SASE experience for mobile. Distributed to enterprise customers via Hermes' existing GTM motion.