RemoteGympSecurity

Security

How RemoteGymp protects access, sessions and administrative actions.

How we keep it locked down

Encrypted remote sessions

Screen, keyboard, file and terminal traffic is encrypted in transit between supported agents, browsers and the service. On Self-Hosted, that relies on a correctly configured HTTPS deployment.

MFA and Microsoft sign-in

Protect your account with multi-factor authentication and Microsoft sign-in. Sensitive actions ask for an extra check.

Access you control

Choose who can connect, which devices they can reach and what they can do. Permissions apply throughout the session.

A record of the work

See who opened a session and which important administrative actions they took. Useful for accountability and the next support call.

Keep customers separate

Give teams and customers access to their own companies and devices, without opening up the rest of your fleet.

Protect stored secrets

Sensitive stored credentials and recovery keys are protected at rest. Recovery-key access is restricted and audited.

Cloud or your infrastructure

On Cloud we choose the hosting region, so you can't pin your data to one country. Self-Hosted keeps the service and operational database on infrastructure you control. Internet access is still needed for licensing and any external services you choose.

Password checks with scoped access

Password checks need a dedicated permission and existing company/device access. Actions and outcomes are audited. Full account hashes stay on the device; only five-character hash prefixes go to Have I Been Pwned over HTTPS, with matching completed locally.

Treat password reports as credentials

The portal does not display recovered passwords. Emailed reports and CSV attachments can include matched common passwords in readable form; mailboxes and backups may retain them. The application does not retain those reports in its database or ordinary audit log. Matches found only through Have I Been Pwned (HIBP) do not reveal the password.

Cloud vs Self-Hosted

Cloud

Hosted by us, multi-region, nothing to run.

  • Full remote support and RMM
  • Updates and maintenance handled for you
  • Custom web address and API & MCP access available as paid add-ons
  • Base price: US$21 a month for 1,000 devices

Self-Hosted

Run the service on your own infrastructure.

  • Your servers, your operational data
  • Combined remote support and RMM on your infrastructure
  • Same agent, dashboard and core toolkit
  • Same device brackets at twice the Cloud price
  • Needs internet access for licence checks

The right access, for the right person.

Give people the access they need, protect sensitive work and keep a useful record.

Separate teams and customers

Give technicians the right tools with built-in or custom roles. Let customers reach their own permitted devices while keeping the rest of your fleet private.

AI that asks first

See the diagnostic information and maximum cost before an AI run. Review proposed fixes and approve the changes you want.

Stop requesting quotes. Start a session.

We think it's the best remote support and RMM tool in the world. We would, obviously. One device free. Thirty days free on the rest. No card, no call — go and prove us wrong.

Start free trial