Your own remote support– Remote Support Without Cloud Lock-in
You connect to remote computers, as with TeamViewer. But you keep full control. Connections run through your own connection server. The apps on the devices are open source.
Request a demoAt a glance
- Your own relay server
- Apps for all common systems
- End-to-end encryption
- File transfer
- Session recording
- No vendor lock-in
Features at a glance
A modern alternative to TeamViewer and AnyDesk that you run yourself. You get all the features of classic remote support. You do not depend on an outside provider.
Your Own Connection Servers
Your own servers set up each connection. If two devices cannot reach each other directly, they forward the data. No outside servers are involved.
Apps for Every Device
There are apps for Windows, macOS, Linux, Android and iOS. There is also a version that runs right in the browser.
E2E Encryption
Each session is encrypted end to end with a proven crypto library. Even the connection server cannot see what is sent.
File Transfer
Send files safely in both directions between your computer and the remote device. This works during a session and outside one.
Unattended Access
You can maintain devices even when nobody sits in front of them. They get a fixed ID, a fixed password and a second factor (2FA).
Session Log
Each remote session is logged, and you can also record it. That gives you evidence for audits.
Technology & integration
Remote access has three parts. A connection server registers devices. A relay server forwards data. An app runs on each device. You manage the users centrally.
- • Connection server that registers devices
- • Relay server that forwards data
- • Apps for Windows, macOS, Linux, Android and iOS
- • Version for the browser
- • Central user management
- • Proven crypto library
Technical foundation
SecTepe.Comm uses the proven open-source tool RustDesk: hbbs brokers connections, and hbbr relays them. It all runs with Docker Compose, and the setup page sits behind Traefik. The ports can be limited to the WireGuard VPN.
Your benefits
- Independent of TeamViewer / AnyDesk
- No license fees per technician
- All sessions run through your own relay
- Runs on your own servers
- Works on every major platform
How remote access works in practice
Remote access in SecTepe.Comm has three parts, each in its own container. The connection server registers devices and hands out IDs. The relay server carries a session when two devices cannot reach each other directly. A small web page shows your server details and how to set up the apps.
How a session is set up
- The app on a device registers with your connection server and gets a unique ID.
- To connect, you enter the ID of the target device. The connection server brokers the link between both devices.
- If your network blocks a direct link, the traffic runs through your relay server instead.
- The session data is encrypted end to end.
On its first start, the server creates a key pair. You enter the public key in every app. The apps use it to check that they talk to your server.
Typical scenarios
- Help desk: Support staff connect to the PC of a user with its ID and password.
- Servers and office PCs: Unattended access with a permanent password gives lasting access. The setup guide advises this only for trusted devices.
- Working with files: Move files by drag and drop and share the clipboard. You can also view all monitors of the remote machine.
Operation and data sovereignty
Remote access runs in the Comm container setup. Its relay cannot work through the web reverse proxy, so it uses its own ports. By default, these ports are only reachable on the server itself. You open them to the internet on purpose with one setting. The firewall rules are then your task. The guide shows how to allow the ports only from the company VPN. The setup page runs behind the reverse proxy with TLS and rate limits. You can embed it in the Comm web interface.
Common questions
Which ports must be open? TCP ports 21115 to 21119 and UDP port 21116. The web page uses the normal HTTPS port.
What do I need to back up? The data volume with the server keys and settings. If the public key changes after a restore, you update it in all apps.
Which license does the remote access software use? It is open source under the AGPLv3.
Ready for self-hosted remote access?
We set up and run your relay servers. We also roll out the apps and handle central admin.
How we work with you
We want to work with you for the long run, not just deliver once. Our way of working has four steps. So you always know what comes next, who does what and what you get.
1. Free initial conversation
We learn where you stand and what you want. In 30 to 45 minutes we check if we are a good fit. We show you options and answer your questions. There is no obligation.
2. Current state review
We check where you stand today: tech, processes and rules. You get a list of strengths and gaps, sorted by urgency. Our offer is based on it.
3. Delivery with a dedicated lead
An experienced lead guides you through the project. You get clear goals, an open plan for time and cost, and a status every week. All results are written down and belong to you.
4. Running and reviewing
After the project we stay with you. We run systems for you, check them at set times and keep track of open tasks. When new threats or new rules come up, we get in touch.
Common questions
We hear these questions most often in a first call. For anything else, write to hello@sectepe.de or give us a call.
- How do we start working with SecTepe?
- Every project starts with a free first call. Then you get an offer with scope, timeline and result. If you like, we start small with a pilot. That way you get to know us before the real work starts.
- What company sizes and sectors do you support?
- We work for small and mid-sized firms, for parts of large groups and for operators of critical infrastructure (KRITIS). Often that means industry, trades, health, banks, energy and public bodies. Our focus is mid-sized firms in Germany, Austria and Switzerland.
- Do you work on site, remotely or hybrid?
- Both. Reviews, advice and most services run remotely from German data centers. For workshops, training and emergencies we come to you, mainly in North Rhine-Westphalia, the Rhineland and the Ruhr area. We travel further when needed.
- Which standards and regulations do you cover?
- We work to ISO 27001:2022, BSI IT-Grundschutz, TISAX, B3S KRITIS, NIS2 and DORA, plus sector-specific rules. Our methods build on known frameworks such as NIST CSF, MITRE ATT&CK, OWASP and OSSTMM. We combine them to fit each project.
- How do you protect the confidentiality of my data?
- By contract and by technology. Before every project, both sides sign a non-disclosure agreement. Your data stays in German data centers. Every access needs a second login factor and is checked one by one. Our whole team is bound to secrecy by contract and under the GDPR.