Strong sign-in
Two-factor authentication with an authenticator app, passkeys, or single sign-on with Microsoft Entra ID and Google. Admins can make 2FA mandatory for everyone.
Security
Trusted access to
Trusted access to
every computer you manage.
A remote management tool is a master key. Here is how SmartRemote keeps it in the right hands.
Least privilege
Roles and permissions down to single actions, limited to the companies a technician looks after. Sensitive actions ask for a reason.
Four-eyes scripts
Script versions need approval from someone other than the author. With "only approved scripts", nothing else can run on your devices.
Encryption
TLS for all connections. Vault entries, integration credentials and 2FA secrets are encrypted with AES-256-GCM; backups are encrypted before they leave the server.
Locked-down agent
Each device has its own enrollment token. The agent only accepts updates signed with our key and validates every path, service and process it is asked to touch.
Complete audit trail
Remote sessions, scripts, file transfers, vault reveals, role changes and downloads are logged with user, device, time and IP address.
Short-lived sessions
Access tokens expire after 15 minutes and live in httpOnly cookies. See and end your sessions on other devices.
Backups you can restore
Encrypted backups, copied off-site to S3 or SFTP, and each new backup is checked with a restore drill.
Rate limits
Sign-in attempts are limited per IP address and per account; token endpoints count every attempt.
The person at the screen
Respect for the end user
Remote support works best when users trust it. SmartRemote makes every session visible and, if you want, asks first.
- A notice on screen while a technician is connected
- Optional consent prompt before a session starts
- Privacy screen hides your work from people in the room
- Texts in English, German, French, Italian or Albanian
Privacy & compliance
Under Swiss and European rules
We process data on the computers you manage only on your behalf. Every customer gets a data processing agreement under the Swiss nFADP and the EU GDPR, and a public list of sub-processors.
- Data processing agreement (nFADP / GDPR)
- Sub-processors listed; optional ones only when you switch them on
- Data export and deletion at the end of the contract
- Self-hosting available for full control
Report a vulnerability
Found a security issue? Write to us; we answer within two working days. Please give us time to fix it before you publish.
Pay per technician. Manage as many devices as you like.
Try every feature free for 7 days. No credit card, no sales call unless you want one.