ObserveIT uses an agent based desktop collection method to monitor desktop and user activity, and it aligns its solutions to the domains of employee monitoring (including privilege users), audit and compliance, insider threat, vendor risk management, and gateway and windows monitoring. The firm profiles user activity and behavior, and uses rules to look for anomalies.