Secure remote access for installers and integrators

Remote access to devices on any network.

Reach the headends, routers and controllers you support on customer networks you don't control, straight from your browser. No port forwarding, no VPN, no firewall changes and no site visit. Each connection opens one named device, belongs to one person and closes on its own.

0inbound firewall rules
1service per session
30 minidle expiry, 8 h maximum
One session, one pathExample
A redpoll access path A technician connects through the redpoll overlay to a site gateway that dials out from the customer site. Only the TV headend's web interface is reachable. The site's other devices are not exposed and the firewall has no inbound rules. CUSTOMER SITE · 192.168.0.0/24 Inbound rules: none dials out · 443 Technician signed in redpoll checks access Site gateway outbound only :443 TV headend web UI only NVR Modem not exposed
Access session Active
Service
Headend web UI · HTTPS 443
Site
Harbour View Hotel · plant room
User
j.okafor@northwind-av.example
Idle expiry
29:41
Ends by
7 h 52 min
Renews while in use · every event audited

The usual options

Port forwards and VPNs open far more than the job needs.

To fix a channel map or check a modem, installers forward a port, keep a VPN into the customer's network, or get in the van. Each one costs time or trades away something the customer's IT team cares about.

MethodInbound portsWhat you can reachWhen it endsRecord of who did what
Port forwardingon the site routerYes, open to the internetThe device, for anyone who finds itWhen someone remembers to close itNone
Site VPNinstaller to LANUsuallyThe whole networkWhen the tunnel is taken downOften a shared login
Site visita van and a dayNoEverything in the buildingWhen you drive homeA timesheet
redpolloutbound site gatewayNoneOne named service30 min idle, 8 h at most, or on revokePer person, per session

How it works

One gateway per site. Every device, from anywhere.

A small gateway joins the customer's network and connects out to redpoll. From then on, you choose which devices it makes reachable and who on your team may open them.

1 · On site, once

Plug in the gateway

It enrols with a one-time code, makes its own keys, and connects outward over HTTPS. The customer's firewall needs no new rules and the gateway accepts no connections from the internet.

compact appliance · signed configuration · outbound heartbeat

2 · From the dashboard

Choose the devices

Add the devices you support and the one port each should publish, such as a headend's web interface or a modem's settings page. Anything you have not named stays unreachable.

Headend web UI · 192.168.0.20 · HTTPS 443

3 · Whenever you need it

Connect from anywhere

Pick a device and its interface opens in your browser, isolated from everything else. The session belongs to you, renews while you work, and closes after 30 idle minutes.

user-bound · service-bound · revocable · audited

For installers and MSPs

Every customer site and device on one dashboard.

See which gateways are reporting and which devices need you before the customer calls. Each customer is a separate organisation, and your team only sees the sites they are assigned to.

Harbour View Hotel

gateway rp-gw-86be · last report 12 s ago
TV headendOnline
192.168.0.20 · HTTPS 443 Open web UI
Lobby modemOnline
192.168.0.1 · HTTP 80 Open settings
Bar display controllerSlow
192.168.0.41 · HTTP 8080 Open web UI
Conference NVRNot published
192.168.0.60 · no service named Unreachable until you name it
Example data. Site and device names are fictional.Status always has a label as well as a colour.

Standing access by role

Administrators and technicians can open services at the sites they are assigned. Viewers can check health but cannot connect.

A map of your estate

Sites cluster on a map with their current health, so a regional outage stands out from a single bad device.

Revoke from anywhere

End any active session from the dashboard. The connection drops and the revocation is written to the audit log with your name.

Security

Built so the customer's network stays closed.

Remote access is only worth having if the customer's IT team is comfortable with it. redpoll gives them nothing new to open and a clear record of every connection.

On the customer's network

  • Outbound only. The gateway dials out over HTTPS and accepts no connections from the internet.
  • No network access. Only the devices you name are reachable, never the wider LAN.
  • Signed configuration. Each gateway holds its own keys and runs only configuration signed for it.

For every connection

  • One person, one device. Sessions cannot be shared or widened.
  • Expires on its own. 30 minutes idle, 8 hours at most, or the moment it is revoked.
  • Isolated in the browser. Each device opens in its own origin, and device passwords pass through without being stored.

Across your team

  • Separate customers. Each customer is its own organisation, filtered on every read and change.
  • Access by role. Technicians see only the sites they are assigned; viewers can check health but not connect.
  • A full audit trail. Sign-ins, sessions, revocations and edits are recorded against a name.

Get started

Connect your first site with us.

Tell us about the sites and devices you support. We'll set up your account and bring your first site online with you, then help you roll out across the rest of your estate.

  • Hands-on onboarding for your first site
  • Works with any device that has a web interface
  • Add sites and technicians as you grow

We use these details only to reply to your request. They're emailed to us, not stored on this site, and never added to a mailing list. Cloudflare Turnstile checks that you're a person.