Armure is designed for customer-controlled deployment inside your environment. See the architecture →
Armure Suiteby Simplified IT
Secure Remote Access Generally available

Armure Work from Anywhere

Secure RDP, SSH and VNC access from any browser, over HTTPS alone — no VPN client, no protocol exposure at the perimeter.

The problem

VPNs are licence-heavy, hard to manage across thousands of endpoints, and push remote-access protocols to the edge of your network.

How Armure solves it

A thin web component in the DMZ terminates HTTPS and brokers sessions to a gateway on the internal network. Users reach RDP, SSH and VNC from any HTML5 browser; the access protocols never touch the perimeter.

Capabilities

What it does

RDP, SSH and VNC in any modern HTML5 browser
HTTPS-only across the DMZ; optional SFTP for file transfer
Multi-tier topology: DMZ web tier, internal gateway
Multi-factor authentication support
TLS network-level security
Pluggable auth, authorisation, audit logging and provisioning
Stateless services for horizontal scale
Deployment topology

Only a thin web tier touches the edge

Zone 01 · Internet

Browser client

HTML5 client for RDP, SSH and VNC — no install.

Zone 02 · DMZ

Web tier

Stateless web component terminates TLS; brokers sessions inward.

Zone 03 · Internal

Gateway & targets

Internal gateway reaches target machines; protocols never hit the edge.

At a glance

Specifications

Deployment
On-premise · private cloud · hybrid · containers / Docker
Protocols
RDP · SSH · VNC over HTTPS · optional SFTP
Client
Any modern HTML5 browser — no install
Security
MFA · TLS · audit logging
Scale
Stateless services · horizontal scaling
Runtime
Shared Armure service runtime and identity substrate
Where teams use it

Common use cases

01

Work-from-home for employees

02

Cross-office workstation access without VPN tunnelling

03

Production-server access for IT operations

04

Remote support access

05

Time-bound access for external consultants

See ArmureWFA running in your environment.

We’ll set up a demo against your real network and identity provider.