Apps · EdgeReach

Operate unattended devices — from any browser

A solution for remotely operating unattended devices — kiosks, digital signage, industrial PCs, PLC gateways, unmanned lab / medical equipment — behind CGNAT and firewalls, with no VPN. Bulk fleet provisioning and agent enrollment, remote exec and config / firmware delivery, and a live screen that opens in a browser, no install. EdgeReach is built by assembling the NetServ Kits (ConnectKit · DeviceKit · SessionKit · ServerKit).

Unattended device ops End-to-end encrypted · no VPN Browser live screen On-prem · self-hosted Built from the Kits

Talk to us See the stack Developer SDKs

EdgeReach is an onboarded, quoted-to-scale solution. Agents deploy to devices via a per-device enrollment bundle; operators run the fleet from a central console and a browser. Want to build it yourself? Assemble the SDKs below.

Key features

📦 Bulk provisioning & enrollment

Pre-register a fleet from the console / CLI and emit a per-device enrollment bundle (agent.json). Each device flips awaiting → online on first contact.

🛠️ Remote management (RMM)

Inventory and status, remote command exec, and versioned config-push via the agent (DeviceKit RPC · telemetry).

⬆️ File & firmware delivery

Chunked, resumable, SHA-256-verified transfer with atomic apply — update even headless devices safely.

🖥️ Browser live screen

See and control an unattended device's screen from a browser, no install. The ServerKit web-viewer gateway terminates and decodes the session on-prem and re-serves frames.

🔐 End-to-end encryption · NAT traversal

ConnectKit's J-PAKE · AES-256-GCM end-to-end encryption, with hole-punch P2P and relay fallback — it connects from behind firewalls and CGNAT with no VPN.

🚨 Fleet monitor · alerts

Detect offline / low-disk / high-load transitions and alert via webhook / Slack — the early warning unattended operations need.

🏢 Central management console

Device inventory and connection history, roles (RBAC) and access policy, and a host-secret vault at the organization level (edge SKU).

🔒 Self-hosted · data sovereignty

Run the connection servers and console yourself. Screen, commands, and data never pass through an outside cloud — a fit for regulated and closed networks.

🪟 Windows service agent

The Windows agent runs as a service (auto-restarts on failure) and shows the real console screen — including the logon screen, lock screen and UAC secure desktop. Install, update and uninstall scripts are provided.

🎟️ Unified-account auth · billing integration · turnkey deploy

Operators sign in with OIDC (the NetServ unified account or your own IdP), and licensing is based on the number of managed devices. Install it as a turnkey self-hosted package with a bundled identity server, TLS profiles, and install / backup / restore / upgrade scripts.

How it works — assembled from the NetServ Kits

EdgeReach didn't invent a new protocol — it assembles NetServ's developer SDKs. Over one ConnectKit connection it multiplexes control (DeviceKit) and screen (SessionKit), and ServerKit handles the browser-based operation.

🔌 ConnectKit — connection

The NAT-traversal, end-to-end-encrypted pipe. The foundation that links device and operator directly and securely.

📟 DeviceKit — device control

RPC, telemetry, remote exec, file / firmware — the persistent control channel.

🗂️ SessionKit — live screen

Screen capture, streaming, input injection. Mounted on DeviceKit's session sub-channel so control and screen ride one connection.

🧩 ServerKit — servers · web viewer

Coordinator, relay and gateway, plus the web-viewer gateway that serves the live screen to a browser.

Control and screen ride one connection: DeviceKit carries control and telemetry, SessionKit rides DeviceKit's session sub-channel for the screen, and the ServerKit web-viewer gateway re-serves frames to the browser.

Use it when

You remotely operate and recover kiosks / digital signage scattered across many sites
You manage and update industrial PCs / PLC gateways safely behind closed networks and CGNAT
You continuously monitor and remotely service unmanned lab / medical equipment
You bulk-enroll a fleet of tens to thousands of devices and roll out config / firmware

Verified

The agent runs on Windows, Linux, and macOS, with real screen capture and input injection verified on Linux and macOS.
The hardware H.264 screen path has been verified (requires a Premium license).
A real-NAT field test passed with no VPN — a home-network device connecting to the cloud coordination server.

Components · onboarding · console access

Operators run the fleet from a central console (edge SKU) and a browser web viewer (ServerKit ViewerGateway). The console is self-hosted inside your trust boundary.

🔴 Live demo — try the EdgeReach web viewer right in your browser, no install: console.edge.remote-viewer.com — a synthetic demo device streams a live screen (no production data). The console's "Try it" button lets you in as a guest (60 minutes) with no sign-up or sign-in, to explore five demo devices (kiosk, signage, HMI, gateway and POS scenarios). A real deployment is on-prem / self-hosted, as below.

Component	Role	Provided / access
Central console (edge SKU)	Devices · provisioning · roles · secrets	On-prem, provided at onboarding
Agent	Resident on the device — control · telemetry · screen	Deployed via per-device enrollment bundle
Web viewer (ServerKit ViewerGateway)	Browser live screen & control	On-prem · ServerKit
Provisioning CLI	Bulk fleet enrollment · bundle issuance	Provided at onboarding

Enterprise · quoted to scale

Open the live demo Request a consult See managed service

EdgeReach runs on NetServ's developer SDKs (ConnectKit · DeviceKit · SessionKit · ServerKit). To build your own unattended-device solution or self-host the servers, see the SDK Products.