Mouse jiggler detection software that keeps a human in charge

Mouse jigglers, auto-clickers, auto-typers — tools that fake keyboard and mouse input are cheap, easy to find, and hard to spot in an ordinary timesheet. If you manage a remote team, you have probably asked yourself two questions: can employers actually detect mouse jigglers, and what should happen when one is found?

SCREENish answers both. Its detection can flag a stretch of tracked time that looks like it was produced by an auto-clicker, a mouse jiggler or a similar tool. And it answers the second question with a firm design decision: everything it notices goes to a review queue for a person to look at. It is never an automatic accusation.

Can employers detect mouse jigglers?

Yes — with the right tooling. Fake input tends to look different from a person actually working, and stretches of tracked time produced that way can be flagged for attention. SCREENish does exactly this: when a period of activity looks like it may have come from an auto-clicker, a mouse jiggler or a similar tool, that period is surfaced in a dedicated queue called Activity review.

What SCREENish deliberately does not do is act on the flag by itself. No time is rejected, no one is penalised, and no message is sent to the employee unless you, the manager, decide to act. Detection produces a question for a human, not a verdict from a machine.

What managers see in the Activity review queue

Each flagged stretch appears as a card in Activity review. A card is built to help you make a fair call, not just a fast one:

• Why it surfaced. Every card explains the reason it was flagged, in plain language, so you know what you are looking at before you judge it.
• The screenshots behind it. You can open the screenshots from the flagged period and compare what was on screen with the activity that was recorded. SCREENish captures screenshots at random moments throughout tracked time, so there is real context to check against.
• Benign explanations, called out up front. Some legitimate setups can resemble injected input — a remote-desktop session is the classic example. When SCREENish recognises one, the card says Benign explanation detected — check before acting. Take that label seriously: it usually means nothing is wrong.

The full walkthrough is in Activity Review: Checking Unusual Activity.

Confirm, dismiss, or ask for more information

After reading a card and looking at the evidence, you choose one of three actions:

• Confirm — you have reviewed the material and agree the activity was not genuine work.
• Dismiss – false positive — the flag was wrong or has an innocent explanation, and the matter is closed.
• Need more info — you are not sure yet and want to look further before deciding either way.

SCREENish's own guidance is worth repeating: when in doubt, talk to the person before you confirm anything. A two-minute conversation resolves most ambiguous cases faster — and more fairly — than any dashboard can.

Why "never an automatic accusation" matters

Software that silently docks time or auto-labels an employee a cheater creates two problems at once. First, false positives become punishments: an unusual but honest work pattern — a remote-desktop session, an accessibility tool, an odd workflow — turns into a deduction the employee has to appeal. Second, it corrodes trust: people who know a machine can convict them without a hearing stop giving the monitoring system the benefit of the doubt, and often stop giving the employer the benefit of the doubt too.

SCREENish's model avoids both. Detection narrows your attention to the handful of periods worth a look; judgment stays with you. Until a manager confirms a finding, nothing changes for the employee — their time stands, their pay stands, and their record stands.

What the fairness design means for employees

Honest employees benefit from this setup as much as managers do:

• No silent penalties. Time is never rejected by an algorithm. A person reviews the evidence first, and dismissing a false positive closes the matter.
• Exculpatory context is surfaced, not buried. If a remote-desktop session explains the pattern, the reviewer sees that explanation on the card before they can act.
• A chance to respond. The Need more info path exists precisely so managers can ask before they conclude.
• Protection for the diligent. When fake activity can be caught, the colleague quietly running a jiggler no longer looks identical to the one doing the work — which is better for everyone actually doing the work.

Part of a complete work-log picture

Activity review works alongside the rest of SCREENish's work logs, so a flag is never your only piece of context:

• Machine and system info shows the computers an employee tracks time on — operating system, monitors and their resolution, how many screens are captured, CPU, RAM and cameras — useful when you are working out whether an unusual pattern has a hardware explanation.
• Automatic screenshot approval lets you stop hand-approving routine screenshots and set rules that hold back only idle-heavy ones, so your review time goes where it matters.

Frequently asked questions

Can employers detect mouse jigglers?

Yes. SCREENish can flag a stretch of tracked time that looks like it was produced by a mouse jiggler, auto-clicker or similar tool. The flagged period goes to the Activity review queue, where a manager reads why it surfaced, opens the screenshots, and decides what to do. Nothing happens to the employee's time unless the manager confirms the finding.

Does SCREENish automatically reject time when it detects fake activity?

No. Detection is never an automatic accusation. No time is rejected and nobody is penalised unless a manager reviews the flagged card and chooses to act on it.

Will using remote desktop get me flagged for faking activity?

Remote-desktop sessions can resemble injected input, so SCREENish recognises them as a legitimate explanation. When that happens, the review card says "Benign explanation detected — check before acting", telling the reviewer that nothing is likely to be wrong before they make any decision.

What tools does the detection cover?

Activity review flags stretches of time that look like they were produced by auto-clickers, mouse jigglers or similar tools that fake keyboard or mouse input. Each card explains why the period surfaced so the reviewer can judge it on the evidence.

What can a manager do with a flagged period of time?

Three things: Confirm the finding, Dismiss it as a false positive, or choose Need more info to keep looking before deciding. SCREENish recommends talking to the person before confirming anything when there is any doubt.