Enrol once. Backstage SYSTEM. No inbound RDP.
An AI agent driving its own Windows desktop is an unattended machine that occasionally needs a human. The usual answer — RDP through a jump host — opens inbound access to the exact machines you least want exposed. That is how fleets get popped.
A named use case, not a new product
Secure Desk is remote support, not VDI. A technician connects to a real Windows machine the agent already has. Nothing is streamed from a datacenter desktop. An agent desktop is an unattended Windows machine with nobody at the keyboard — which is precisely the case the installed service and backstage shell were built for.
Enrol each desktop once
The installed service runs as LocalSystem from boot with its own enrolled device token. An agent VM is reachable across logon, lock and reboot — whether or not a human has ever signed into it.
Backstage: a SYSTEM shell, no desktop
Backstage opens cmd or PowerShell as SYSTEM with no desktop attached. Read logs, restart a stuck service, or fix a dependency while the agent keeps running on screen, undisturbed. You do not take the agent's keyboard to repair the box.
No inbound RDP to the agent subnet
Both ends dial out over WSS to the relay you run. An agent fleet can sit in a locked-down subnet with no public IP and no inbound exception. Neither side needs a public IP or an inbound firewall rule. The relay pairs them and nothing else.
Reach, inspect, repair
Attach to the live desktop and see what the agent is actually doing. Multi-monitor machines let you pick the screen. Pull traces, screenshots and output files back over the same encrypted channel, verified by SHA-256 on arrival. Roles decide who may connect. The portal records who opened which session and when. Sessions can be recorded from the console.
What this is not
Secure Desk does not run or orchestrate your agents. It is how you reach, watch and repair the desktops they run on. Device caps by plan are 3, 100 and 1,000. Tell us about your fleet if you need more than that. This is not Citrix or Horizon.
Read how a session works, the security model, or start free.