Prevent v4 or Secure GxP: which one fits your GxP environment?
Both come from Origami IT Lab, and both stop users from changing data on regulated Windows machines. The difference is scope. Prevent locks down one PC. Secure GxP governs every PC and gives you the records an inspector asks for.
Side by side
Each requirement below is one that comes up in GxP audits of Windows computerized systems.
| Requirement | Prevent v4 | Secure GxP |
|---|---|---|
| Architecture | LimitedStandalone desktop app. Policies are applied locally on each workstation. | MetServer-client. One web portal and database manage every endpoint through a secured API and Windows agents. |
| Machine coverage | LimitedOnly the machine it is installed on, configured by hand. | MetDomain-joined, non-domain and fully offline workgroup machines. Offline PCs are configured with a USB configuration file. |
| Windows 11 | GapNot supported. Covers Windows XP, 7, 8, 10 and Server 2003 onward. | MetSupported, with the same policy set applied consistently across OS versions. |
| Security policies | LimitedAbout 20 restrictions: cut, copy, paste, delete, rename, drag and drop, right-click, ribbon, USB, Control Panel, app blocking. | Met50+ policies, including file-system access control and application whitelisting. |
| Group management | GapNone. Each PC is set up separately. | MetGroup machines by location, department or function and apply policies to a whole group in one action. |
| Access control | LimitedA single login to open the app. Local admins and selected OUs can be excluded. | MetVendorAdmin, SuperAdmin and Admin roles for separation of duties, with Active Directory integration. |
| Deviation alerts | GapNone. If a restriction is bypassed, nobody is told. | MetReal-time detection and automatic alerts, for connected and disconnected machines. |
| Audit trail | LimitedActivity log stored in local files on each machine. | MetTamper-proof, timestamped record of system changes, policy applications and user actions, kept centrally. |
| Compliance reports | GapNot available. | MetOne-click PDF export of policy status, machine compliance and audit trails. |
| IQ/OQ validation | GapNot included. Your team writes the protocols. | MetIQ/OQ templates, test scripts and validation protocols included. |
| Install prerequisites | LimitedPowerShell execution policy must be set to Unrestricted. Licence activation needs internet. | MetAgent-based install. Offline machines keep enforcing and monitoring without a network. |
| Product development | LimitedMature release, maintained for existing customers. | MetRegular releases. Automated compliance checks and policy copying are on the roadmap. |
Why teams are moving to Secure GxP
One console for every machine
Instrument PCs, contractor laptops and standalone lab systems that can't join your domain are all managed from one place. No more visiting each PC to change a setting.
Proof, not just restrictions
Inspectors want evidence that controls were in force on a given date. Timestamped audit trails and one-click PDF reports give you that answer in minutes.
Validation work already done
The IQ/OQ package ships with the product. Your validation team reviews and executes protocols instead of writing them from scratch.
You find out before the auditor does
If a policy is changed or a protection is bypassed, you get an alert straight away, even from machines that were offline at the time.
Ready for Windows 11
Prevent v4 stops at Windows 10. When your site refreshes hardware, Secure GxP covers the new machines with the same policies.
Clear separation of duties
Three admin roles decide who can change critical policies, so the people being controlled can't switch off the controls.
Which one is right for you
Prevent v4 still does its job well in narrow cases. Here's how to decide.
Choose Secure GxP if
- You manage more than a handful of regulated PCs, or several sites.
- You have Windows 11 machines now or planned.
- You need audit trails and reports you can hand to an inspector.
- You have non-domain or offline machines that GPO can't reach.
- You want a ready IQ/OQ package to cut validation time.
Prevent v4 may still be enough if
- You have a few standalone PCs that will stay on Windows 10 or earlier.
- You only need basic cut, copy, paste and delete restrictions.
- No one needs central reports or alerts from those machines.
Already using Prevent?
Existing Origami IT Lab customers can move to Secure GxP at a reduced first-year price. We handle the move with you.
- Migration assistance from our team
- Seamless data migration from existing systems
- Full validation support with the IQ/OQ package
- Access to every Secure GxP feature from day one
Common questions
Does Prevent v4 support Windows 11?
No. Prevent v4 supports Windows XP, 7, 8 and 10 plus Windows Server 2003 and later. Secure GxP supports Windows 11.
What is the main difference between Prevent v4 and Secure GxP?
Prevent v4 applies restrictions on one workstation at a time. Secure GxP manages policies, deviation alerts, audit trails and compliance reports for every machine from one web portal, including non-domain and offline machines.
Can Secure GxP manage machines that are not on the network?
Yes. In-network machines, domain-joined or not, connect through the Secure GxP agent. Out-of-network workgroup machines are configured with a USB configuration file and keep enforcing policies offline.
Does Secure GxP include IQ/OQ validation documentation?
Yes. It ships with IQ/OQ templates, test scripts and validation protocols. Prevent v4 does not include a validation package.
How much does it cost to move from Prevent to Secure GxP?
Existing customers pay $49 per license per year for the first year, compared with $149 on the Standard plan. Migration assistance and validation support are included.
See Secure GxP on your own setup
Tell us how many machines you run and which are offline or off-domain. We'll show you how the policies, alerts and reports would work for your site.
Or call +91 84849 63159