ATS Access ยท Windows first

Remote support
the service can't see.

Attended and unattended remote support for Windows, built security-first. Every session is mutually authenticated and end-to-end encrypted, routed so our service only ever holds short-lived ciphertext. No inbound port to open, no chokepoint to trust.


Why it's different

Remote access that answers to you.

Every browser-based remote tool routes your screen through a server that could watch it. ATS Access is the other thing: two devices that authenticate each other and talk in ciphertext, with the service holding nothing it could read.

  • End-to-end encrypted, alwaysEvery session runs over a mutually authenticated TLS 1.3 and QUIC channel between two pinned device identities. The worldwide rendezvous only ever carries ciphertext, so there is nothing in the middle to read.
  • Pairing you can trustSingle-use SPAKE2 codes expire in ten minutes, and trust persists only after both devices separately prove possession. No account to create, no standing password to leak.
  • Credentials in the OS vaultEd25519 device identities and unattended passwords, hashed with Argon2id, live in Windows Credential Manager or the macOS Keychain. They are never handed back to the app's web layer.
  • Fails closed, by designEvery remote capability denies by default. Denial, timeout, disconnect, or an emergency stop tears down screen and input together and releases anything held.
Features

What it actually does.

Attended and unattended support, built so the security properties are part of the product rather than a settings page. Windows first, with macOS to follow.

Attended screen control

Watch the remote screen and take over mouse and keyboard, with the system capture border always visible and a consent prompt the person on the other end cannot miss.

Password-protected unattended access

Reach devices you have permanently paired, gated by a security code that is verified only after mutual device authentication. Windows sign-in and UAC secure desktops stay off-limits.

No inbound port

Worldwide pairing rides temporary Cloudflare TURN credentials. Nothing listens on the internet, and there is nothing to forward.

Adaptive video

From High at 2560 by 1440 down to Data Saver, adjusted smoothly so quality never oscillates on a shaky link.

Family Tools

Bounded chat, manual clipboard text, and verified file transfer, for the times you are helping a person and not a server.

Signed session log

Every outcome is appended to a hash-chained local log, signed by that device's own key. Two independent records, technician and remote.

You are always in control of the room

A persistent emergency-stop banner and a 30-second consent prompt stay on the remote screen for the whole session. One click on either side ends everything at once, releases every held control, and closes the stream. A dropped connection does the same before it retries, re-proving both identities from scratch.

Support a machine without trusting the middle.

ATS Access is in active development on Windows. If your remote support has to be private by construction, come try it early.