DDevineSecurity Engineer

Modern Workplace Operations Lab — Training environment for IT support · Case study

OrbitDesk

Live demo

OrbitDesk simulates the daily workflow of a Modern Workplace support team. You triage tickets, investigate sign-in logs with Conditional Access analysis, verify device compliance, handle Exchange quarantine, manage voice calls, and collaborate via team messaging. Features include realistic client profiles with distinct policies and SLAs, secure remote desktop with encrypted sessions and audit logging, voice communication with professional controls, and structured performance assessment with CSAT, QA, and communication quality feedback. Built as PWA with offline support and Electron desktop with security hardening, packagable for Play Store via TWA and Microsoft Store via MSIX. All data simulated locally — no real credentials or external API calls.

View on GitHub (opens in a new tab)Try the live demo (opens in a new tab)

Built with

  • Next.js 16 + React 19 + TypeScript + Tailwind CSS + Framer Motion
  • PWA with offline support and installable experience
  • Electron 32 with security hardening and auto-update
  • Web Speech API for voice interaction and Web Audio for telephony
  • Local storage with progress persistence — no backend required
  • Security headers, CSP, and supply chain controls

Security concepts

  • Modern Workplace Operations
  • Entra ID and Conditional Access
  • Intune Device Compliance
  • Exchange and Defender
  • Voice Communication
  • Remote Desktop Operations
  • Team Collaboration
  • Performance Assessment

Flagship

Modern Workplace Operations Lab

OrbitDesk simulates a Modern Workplace support shift — triage tickets, investigate sign-in logs with Conditional Access What-If, verify device compliance, handle Exchange quarantine, manage voice calls, and collaborate with your team. All in the browser, no real tenant credentials, no backend required for core training.

Built for IT support professionals, MSP team leads, and interview preparation — emphasizing realistic policies, audit trails, and professional communication over claims.

Tickets

16 scenarios

Entra ID, Intune, Exchange, Teams — P1/P2, 3 client profiles

Voice

Team + Client

WebRTC peer-to-peer, BroadcastChannel, class-based workforce

Platform

PWA + Electron

Offline, installable, Play Store TWA, MSIX, auto-update

Live demo — no signup

orbitdesk-gamma.vercel.app — guest mode, works offline, progress saves locally. Source-available noncommercial, proprietary flagship.

Try it

Live training environment

Demo flow — 5 minutes to first ticket

  1. Queue — Review active tickets, priority, client context, SLA timers
  2. Investigate — Open Sign-in logs (CA tab), Audit Logs, Service Health, Message Trace
  3. Remediate — Apply fixes in admin portals, verify via remote desktop (dsregcmd, BitLocker, Company Portal sync)
  4. Communicate — Respond to clients with appropriate language for their profile (enterprise, SMB, regulated)
  5. Collaborate — Class-based team calls, presence, coaching, escalation
Open live demo →View source (source-available)

What it does

Training features — no spill, real skills

Ticket Operations

Realistic queue with priorities, SLA tracking, client-specific policies (Enterprise 24/7, SMB business hours, Regulated strict). Root cause analysis, audit logging, What-If simulation.

Voice & Team Calls

Client calls with personas, mute/hold, recording beep. Team calls: class-based workforce, WebRTC peer-to-peer, presence (online, in-call, offline), coaching and escalation.

Remote Desktop

Secure session with encrypted ID, audit logging, consent flow. Diagnostic commands, portal actions reflect in remote view — end-to-end resolution.

Learning & Assessment

Student and Expert modes, XP, levels, badges, structured assessment (CSAT, QA, SLA, communication: empathy, clarity, technical, fluency, client language). Progress persistence for interviews.

Proprietary training content

Ticket scenarios, client personas, coaching logic, and assessment scoring are proprietary and may not be extracted for other training products. See LICENSE in repo.

How it's built

Stack — local-first, no backend required

Next.js 16 App Router + React 19 + TypeScript strict + Tailwind CSS + Framer Motion

  • State: React hooks, localStorage for progress, BroadcastChannel for team calls
  • Voice: Web Speech API (STT + TTS), Web Audio API, WebRTC with STUN
  • PWA: next-pwa, offline support, installable, background sync
  • Desktop: Electron 32 with hardening, contextIsolation, auto-update
  • Security: CSP, security headers, no external API calls for core, simulated data only
  • Packaging: Play Store via TWA (PWABuilder), Microsoft Store via MSIX

Collaboration

Class-based team calling — own space, no overlay

Team Lead can call agents in same class/workforce — like Teams/Slack. Presence: online, in-call, offline. Calling uses WebRTC peer-to-peer audio with BroadcastChannel signaling (same origin cross-tab, no backend), STUN for NAT traversal, getUserMedia.

Fixed: call window placement

Previously fixed top-[68px] right-4 and fixed bottom-4 overlayed ticket queue. Now: header inline relative pill + dropdown absolute right-0 top-10 w-[380px] — own dedicated space, no overlay, z-20 not 90.

Trust

Security & IP protection

  • All data simulated locally — no real tenant credentials, no external API calls for core
  • Source-available noncommercial license as of v6.10.0 — blocks commercial cloning, competing SaaS, trademark use
  • Trademark: OrbitDesk name and logo are trademarks of Devine Nyaenya
  • Watermark: console attribution + DOM hidden watermark + visible footer badge v6.11.0 • IP Locked
  • Security headers: CSP, HSTS, X-Frame-Options, audit logging for remote sessions

Commercial licensing

For commercial use, enterprise deployment, or training platform licensing: devinenyaenya@gmail.com — portfolio

Learning

Multi-language & accessibility

Supports 6 major languages: English, Kiswahili (Kenya), Español, Français, Deutsch, العربية — with auto-detection (localStorage, browser, Nairobi timezone), RTL for Arabic, and extensible to Hindi, Chinese, Portuguese.

Level-based call frequency: Lvl 1 no auto calls (focus tickets), Lvl 2+ P1 critical only, scales to realistic MSP volume. Phone training unlocks at Level 2.

Ship

Live everywhere

Web

Vercel — orbitdesk-gamma.vercel.app — 9/9 routes static, edge headers

PWA

Installable on Windows, macOS, Linux, Android — offline support, background sync

Desktop

Electron 32 with hardening, NSIS installer, auto-update

Stores

Play Store via TWA (PWABuilder), Microsoft Store via MSIX — packagable