ATS Remote ยท Phase 0

RDP built for estates,
not for demos.

A secure connection manager for operators running hundreds of Windows hosts. A real desktop application, because the tool you reach for when the network is broken should not depend on the network being fine.

Talk to us about your estate All products
Why a desktop app

A browser cannot open a socket.

RDP is raw TCP on 3389, and a browser cannot speak it. Every browser-based RDP product therefore routes through a server that terminates WebSocket and relays to TCP.

That trades install on a few laptops for run and secure a server that becomes the single chokepoint for all remote access: a poor trade, and one that also gives up the OS keystore, device redirection and true multi-monitor.

  • Folder inheritance, not per-host duplicationSet credentials, gateway and display policy on a folder and every host beneath it inherits. Four hundred servers stop being four hundred rows to maintain by hand.
  • Credentials in the OS keystoreKeychain on macOS, Credential Manager on Windows. Not an encrypted blob in a sync folder, where the encryption is only as good as the passphrase somebody reused.
  • Gateway routing that is enforcedWhen policy says a host is reachable only through an RD Gateway, the connection cannot silently fall back to a direct hop. Enforced, rather than assumed.
  • The relay does not trust the clientOur loopback relay binds to 127.0.0.1 with a single-use ticket and pins the destination, so a compromised renderer cannot pivot across your network.
  • Import your existing estateRead a Royal TS document (.rtsz or .rtsx, credentials included) and keep the folder structure you already maintain.
Specification

Under the hood

PlatformsWindows and macOS
ProtocolRDP over TCP 3389; RD Gateway via MS-TSGU
Session coreIronRDP compiled to WASM: NLA/CredSSP, codecs, virtual channels
TransportNode owns TCP connect, X.224, TLS upgrade and the gateway tunnel
CredentialsOS keystore: Keychain, Credential Manager
ImportRoyal TS (.rtsz, .rtsx)
StatusPhase 0 de-risking spikes; gateway support in verification