PlatformDelivery BoardAutomation & RunbooksOutcome ReceiptsJust-in-Time ElevationCredential VaultGoverned SessionsDevices & DiscoveryPatch ManagementReporting & ExportsRoles & Multi-Tenancy
Verified AI OperationsThe Operation LoopCommanded AutonomyCompare the operating modelThe Verified Operation Spec
SolutionsFor MSPsFor Enterprise & Internal ITHealthcareLegalFinancial servicesMunicipal & Education
ProofOperation walkthroughSecurity & architectureVerified Operation SpecFive questions for your RMM's AIChangelog
CompanyAboutFounder's noteContact
PricingBuy 1–20 technician licenses onlinePlans — from $499 per monthCustom requirementsFoundation Circle
Log in

Home/Platform/Governed Sessions

Remote access

Reach the resource. Keep the work accountable.

A governed remote session starts with a request. Policy decides, a credential is checked out by reference, the connection is authenticated before the session exists, and the session stays attached to the operation it belongs to.

Session recordOP-000217
opened byMarcus R · his own identity
allowed bypolicy + named authorization
targetSRV-ACCT-02
modenative RDP · through the gateway
credentialvault reference · value never shown
admin accessleased 8 min · expired 09:47
attached tooperation OP-000217
started / ended09:41 / 09:46
chain 9f3a…c47e ON THE RECORD

How it opens

The connection is authenticated before the session exists.

That ordering is the whole design. If the password goes in after the window is open, then someone typed it, and someone can type it again tomorrow. Here the credential is resolved and used to authenticate the connection first — and the person at the keyboard never sees it.

How a session is launchedOP-000217
THE ORDINARY WAY — A TOOL A TECHNICIAN OPENS TECHNICIAN opens a remote tool whenever they feel like it PASSWORD typed into the tool the value is on the desk SESSION opens tied to nothing in particular THE RECORD a connection log written by the tool itself WITH SERAPH — A SESSION YOU HAD TO BE GRANTED 01 REQUEST OP-000217 target: SRV-ACCT-02 02 POLICY who · what · where before anything runs 03 CREDENTIAL checked out by name value never displayed 04 CONNECTION authenticated first then it can open 05 SESSION bound to OP-000217 lease runs the clock AND ALL FIVE OF THOSE FACTS LAND IN THE SAME OPERATION RECORD
Step three is where the two rows stop resembling each other. The vault resolves a reference into a value that authenticates the connection, and that value is never rendered to a screen, a script, or the model. Nobody on the call can read the password out loud, because nobody on the call has it.

Two modes, one rail

Native RDP and Seraph Remote are different things.

We keep them separate on purpose, because a buyer who is told "remote access" and shown two different technologies stops believing the rest of the sentence. Both ride the same outbound tunnel and the same policy point. What happens at the far end is not the same.

The two remoting modessame rail, different far end
YOUR CONSOLE portal or widget dials out THE GATEWAY policy · audit both legs dial in to it THE AGENT on the machine outbound tunnel only NATIVE RDP Windows' own remote desktop a separate signed-in session the credential is injected, never shown SERAPH REMOTE our own capture path independent of that Windows service narrower today — see the note below BOTH RIDE THE SAME OUTBOUND TUNNEL · NOTHING IS EXPOSED INBOUND ON YOUR NETWORK
Native RDP is the path we lean on today and the one we have driven end to end through the gateway with a leased elevation. Seraph Remote is our own capture path, and it is deliberately the narrower claim of the two.

What we claim today: a session is requested, checked against policy, authenticated before it opens, attached to an operation, and its facts land in that operation's record. What we do not claim: complete session recording and playback across every surface. Capture exists and is being proven one surface at a time, and until a surface passes a full end-to-end run on a live system we will not sell it. If you need session video as a control, ask us on a call and we will tell you exactly where each surface stands rather than pointing at a feature grid.

What lands in the record

Six facts, attached to the operation, not to a tool's own log.

A session here is not a free-standing event. It is part of an operation, and it writes into the same record as the work it was opened to do.

What a session contributes to the operation record
who opened itThe technician's own identity — not a shared admin account, and not the agent's principal.
why it was allowedThe policy decision and the named authorization that came before it.
which credentialThe vault reference that was checked out. Never the value.
what privilegeThe lease, what it was scoped to, and the moment it expired.
which operationEvery session opens under an operation id. An ad-hoc session gets one of its own.
when and whereStart, end, and which gateway brokered it.

What we do not do

  • We do not claim complete session recording and playback across every surface.
  • We do not claim multi-monitor remote access.
  • We do not put file transfer in the shop window. It is not the reason to buy this and we will not pretend otherwise.
  • No technician views or drives an end user's browser. Browser-based attended support here is a join code with an explicit consent step and a revoke — the lifecycle, not the screen.
A property, not a gap Two remote-desktop sessions cannot run against the same machine at once. If someone is already on SRV-ACCT-02, you find that out before you connect rather than after you have both taken the keyboard. The record shows which session was live and who held it.

The path in

Your machines dial out. We never dial in.

There is no inbound listener for us on your network and no port for you to open. Both ends of a session dial out to the gateway, and the gateway is where policy, identity and the audit write happen.

Outbound only

The agent on the machine and your console both dial out over an encrypted WebSocket. Nothing on your network is exposed for us to reach, which is usually the first question a security reviewer asks.

Trust center →

Shared or your own

You can sit on a shared gateway, or run a dedicated one for your workspace. Both are real options today, and the choice does not change how policy, leases or records behave.

Roles & tenancy →

One region today

The gateway runs in a single cloud region. If that region has an outage, new sessions pause and reconnect when it comes back — we do not silently reroute. Leases still expire on schedule and audit writes still land, because neither depends on the session transport.

Multi-region and multi-cloud failover is something we intend to build, not something we are selling. Anyone quoting you an always-on remote-access guarantee at this stage is quoting you an ambition. See the roadmap for the order we are doing things in.

The questions that come up on the call.

Can the AI open a session by itself?

It has to ask, exactly like anything else. It files a request under its own principal with its stated intent, policy is checked, a human authorizes, and it gets a scoped lease with an expiry. It can never approve its own request — that invariant is enforced in more than one place on purpose. See Commanded Autonomy.

What does the person at the desk see?

For an attended session, a join code, an explicit consent step, and a revoke they can use at any point. Consent and revocation are recorded events, not UI politeness. For unattended work on a server there is no person to prompt, which is exactly why the authorization and the lease matter so much.

What happens if the gateway is unreachable?

The session fails closed with a clear reason. It does not fall back to some other route — there is no second path, by design, because a fallback transport that skips the policy point is not a feature. Your leases still expire on schedule and your audit writes still land, because neither of those rides the session transport.

Do you record the screen?

Narrower than you want us to say. The operation record is complete — who authorized, which credential reference, the lease and its expiry, the job, the machine's answer. Screen capture exists and is being validated surface by surface, and we will not describe it as shipped recording and playback until each surface has passed a live end-to-end run. The receipt is the artifact we are willing to be measured on today.

Can a technician take over while the AI is working?

Yes, mid-operation. Taking the wheel mints a fresh lease under the technician's own identity — it does not inherit the agent's. The work continues in the same operation and lands in the same record, so the handover is visible rather than being a gap in the story. How leases work →

Bring the hard question

Watch a session open without anyone typing a password.

We will run one live, then open the record it wrote and show you which fields came from the machine rather than from us.