Remote desktop
that gets out of the way
Ten digits and you are on the other machine — encrypted end to end, straight between the two devices wherever the network allows it. Free when someone needs help right now. Built up properly when you look after hundreds of them.
Typical direct latency
Game mode at 1080p
Per-session encryption
Transports, tried in order
What you get
Everything a remote session needs, and nothing it does not
Screen, input, sound, clipboard and files, carried over whichever transport actually works on the network in front of you.
Straight through, not around
QUIC first, TLS 1.3 over TCP next, a relay only if neither can get through. Most sessions never touch our infrastructure at all.
Pinned, both ways
Each session mints its own certificate and both ends pin the other. A middlebox that resigns the traffic is refused and named in the log.
Unattended access that asks first
A machine is reachable because your organization said so, or because its own switch says so — never by accident. Three wrong passwords and that network waits.
Game mode
Hardware H.264 when the GPU allows it, software H.264 when it does not. 1080p60 with intra refresh instead of keyframe stutter.
Files, clipboard, sound
Drag a folder across. Copy an image, paste it there. Hear the remote machine in Opus at 48 kHz, with silence costing nothing.
Elevated when it matters
UAC prompts and the lock screen are reachable through a separate elevated input channel, only once the person at the far end has allowed it.
How it works
Three steps, and the third one is not really a step
Install and read your address
A ten-digit address is issued the first time the service starts. That is the whole setup.
Share it, or store it
Type the address to ask for a session, or enrol the machine so your team can reach it unattended.
Connect
The two devices find each other and talk directly. The relay only matches them; it does not watch.
The link is the product.
So we built that part first.
A remote-desktop link carries everything on the screen and everything typed into it. DeskTunnel treats that as the threat model rather than a feature list: the two devices authenticate each other directly, and our servers are not in a position to read what passes between them.
- TLS 1.3 with per-session certificates, pinned at both ends
- Session resumption disabled, because a resumed session skips pinning
- QUIC with its own ALPN, falling back to TCP and only then to a relay
- Permissions granted by the person at the machine, revocable mid-session
- Connect grants signed by the API and verified offline by the device
- Every management action scoped to one organization and written to an audit log
Start free. Upgrade when the machines start outnumbering you.
Pro is $9.99 a month per seat — each seat is three users — with unattended access, an address book and ninety days of session history.