Meet Alcatraz at GSX 2026. Read more

RockOS

The firmware that powers every Rock device, adapting to your workforce, closing security gaps in real time, and keeping you compliant by design.

Rock X is the hardware. RockOS is what makes it run.

Enrollment, liveness detection, authentication, and tailgating detection, all on the device.

Authentication that adapts to you

RockOS reduces the IT time spent on re-enrollment and access management as your workforce changes.

A Rock device showing a red tailgating alert as a second person follows an authorized entry

Strengthen your security posture

RockOS lowers the risk and cost of a physical security breach.

A person in an office corridor whose face is rendered as rows of orange binary digits

Privacy and compatibility built in

RockOS limits regulatory and legal exposure and avoids the cost of replacing your existing infrastructure.

Sub-second matching

On-device 1:N matching resolves in less than a second.

Adaptive profile updates

Profiles refresh from successful authentications, so a new haircut, beard, or natural aging do not require re-enrollment.

Four authentication postures

Run 1FA face-or-badge, 1FA face-only, 1FA badge-only, or 2FA face-plus-badge, set independently per door.

Adjustable security levels

Low-friction, medium, and high-security settings tune how strictly a device treats head angle and match confidence.

Adaptive 2FA

Keep a door at face-plus-badge for most users while designated groups pass through on face alone.

Three event classifications

Tailgating, crossing, and unauthorized entry are logged as distinct event types, with known and unknown persons reported separately.

Anti-spoofing and liveness detection

Verifies liveness in real time and blocks spoofing attempts before they succeed.

Audible alerts

Configurable voice or tones for authentication, badge-face mismatch, tailgating, crossing, and unauthorized entry.

On-device compute

Face profile creation and matching run locally on each Rock device.

Scales to 25,000 profiles per device

One Rock device holds enough capacity for an enterprise campus, airport, or stadium population.

Offline operation

Matching happens locally, so authentication continues with no dependency on the network or platform during an outage.

Outdoor-ready, multi-modal imaging

Automatically switches between RGB and infrared as ambient light changes, with closed-loop IR control to hold exposure steady.

No PII

Profiles are anonymized templates linked to a badge ID only. No name, gender, or job title is attached.

No stored images on device

Faces convert to a one-way encrypted template. No image is ever retained on the Rock.

Works with your current stack

ONVIF for video, full SIP intercom support on Rock X, and compatible with any ACS via Wiegand or OSDP.

Adjustable field of view

Configure a cone or rectangular detection zone, with independent angles and range, to match any doorway or mantrap.

FAQs

What is RockOS?

RockOS is the firmware that runs on every Rock device, handling authentication, tailgating detection, and privacy protection at the door.

Does RockOS require an internet connection to work?

No. Face matching runs on-device, so authentication continues during a network or platform outage.

Does RockOS store facial images?

No. Faces are converted to a one-way encrypted template at capture; the original image is never retained.

How does RockOS handle multiple people at a door?

It determines who is actually approaching the door and authenticates that person, while classifying tailgating, crossing, and unauthorized entry as distinct event types.

Does RockOS work with beards, glasses, or hats?

Yes. Face detection holds across roughly 80 degrees of head rotation; how much angle is accepted is a configurable security-level setting, not a hardware limit.

Does RockOS support multiple authentication modes?

Yes. Each door can run 1FA face-or-badge, 1FA face-only, 1FA badge-only, or 2FA face-plus-badge, configured independently per device.

Rock solid authentication

See Alcatraz in action