XoLock Feature Overview

What is XoLock?

XoLock is Xobin's secure assessment browser, a desktop application built with Electron and Next.js. Candidates use XoLock to take proctored assessments and AI interviews in a locked-down environment while still allowing camera, microphone, and screen sharing required for proctoring.

Core Capabilities:

1. Assessment Launch

● Paste an assessment or AI interview link, or enter an Assessment ID with an invite token received from Xobin..

● Supports legacy secure-take URLs (secure-take?iid=) and invite links (/wc/assessment/{id}?inviteToken=...).

● System checks run before launch: blocked apps, permissions, and network reachability.

2. Exam Lockdown

When an assessment starts, XoLock engages more than 20 built-in restrictions, including:

● Kiosk mode, fullscreen, and always-on-top window focus

● Navigation lockdown via origin allow-list and URL filter

● Keyboard shortcut blocking (copy/paste/cut, print, reload, DevTools, screenshots, screen recording)

● Clipboard, context menu, and drag-and-drop blocking

● Download and file-picker blocking

● Zoom lock and print block

● Process monitoring for forbidden apps during the session

● Idle watch and focus/minimize/fullscreen-exit violation tracking

● Single-display enforcement and cursor-bounds detection on the primary monitor

● Power-save blocking so the display stays awake

● macOS presentation hardening (Dock, menu bar, Spaces)

● Session permission lock (denies geo, filesystem, and device APIs during the exam)

3. Automatic Screen Sharing

● Display capture is auto-granted for allow-listed assessment origins (verified by Xobin).

● The primary display is shared without a picker prompt.

● On macOS, OS-level Screen Recording permission must still be granted at least once under

System Settings → Privacy & Security → Screen Recording.

4. Permissions

● Camera, microphone, screen sharing, and network connectivity are checked in the launcher.

● macOS: in-app prompts plus links to System Settings.

● Windows: links to Privacy settings; screen recording is treated as granted at the OS level.

5. Preflight Checks

● Multiple monitors are blocked when single-display mode is required.

● Forbidden apps must be closed (remote desktop, chat, browsers, recording tools, VMs, and more).

● Checks run in the launcher before launch.

● Optional startup enforcement is available for hardened deployments.

6. Violation Handling

● Violations are logged locally and uploaded remotely when configured.

● Warning violations reassert focus and fullscreen.

● Critical violations show a lockdown overlay; restrictions remain engaged.

7. Recovery and Telemetry

● Crash recovery snapshots detect unclean exits on the next launch.

● Telemetry export bundles session, violations, and audit data for support.

Supported Platforms:

Exiting an Assessment:

• Default exit shortcut: Cmd+Q on macOS, Ctrl+Q on Windows.

Updated on: 06/23/2026