Self-hosted remote support
The relay cannot watch. You host it. After pairing, the console and the device agree on their own keys. Compromise the relay and you get metadata, not screens or keystrokes.
Who hosts the relay
Secure Desk is the portal and relay you run. Both ends dial out over WSS. There is no vendor cloud in the path. Compare that to a vendor-hosted relay: the operator of that host sits inside the confidentiality boundary.
Who can see the stream
The two endpoints run an ECDH exchange and derive AES-256-GCM keys. A 6-digit SAS catches a man-in-the-middle. The relay you run only forwards ciphertext. The relay cannot watch.
Not VDI, and not a ScreenConnect-cloud clone
A technician connects to a real Windows machine the user already has. Nothing is streamed from a datacenter desktop. This is not Citrix or Horizon, and it is not a hosted ScreenConnect lookalike. You host the portal and the relay.
Reaching AI-agent desktops
Enrol each Windows desktop once. Backstage opens a SYSTEM shell without inbound RDP. Secure Desk does not run the agents, and it does not watch sessions with AI. It is how you reach the desktops the agents already run on.
Read how a session works orstart free.