Everything you need to securely access, monitor, and manage your machines — from any browser, IDE, or terminal.
Full xterm.js terminal in your browser — color support, Unicode, copy/paste, and resize. No client software required. Connects over encrypted WebSocket (wss://).
Agent heartbeats stream CPU, memory, and disk stats to the dashboard. See the health of every machine at a glance, updated live.
Every command is logged with the user, timestamp, and exit code. Full session recording gives you a tamper-evident trail for compliance and forensics.
Securely tunnel remote ports to localhost through the WebXTerm connection. Access internal databases, APIs, and services without exposing them to the internet.
Role-based access control lets you control exactly which users can reach which machines. Manage teams, assign permissions, and revoke access from one dashboard.
All connections are encrypted with TLS 1.3 by default. Enterprise edition adds mutual TLS (mTLS) for certificate-based authentication of agents.
The vsay-agent is a single static binary that runs as a systemd/launchd/Windows service. Connects outbound — no open inbound ports needed.
VSAY VS Code Extension brings machine browsing, integrated terminal sessions, and port forwarding directly into your IDE via the Activity Bar.
Enterprise edition integrates with Keycloak, Microsoft, GitHub, and Okta via OIDC/OAuth2. Multi-tenancy and org-level isolation included.
Connect to any registered machine in seconds. Full xterm.js terminal with color support, Unicode, and native copy/paste — running entirely in your browser over an encrypted WebSocket tunnel.
142
Processes
2.4 MB/s
Network I/O
0.52
Load Avg
The vsay-agent sends continuous heartbeats carrying CPU, memory, disk, and network metrics. Your dashboard always shows the live state of every machine in your fleet.
TLS 1.3 in transit
All traffic encrypted — browser to portal, portal to agent.
mTLS (Enterprise)
Certificate-based mutual auth between portal and agents.
Session recording
Every command logged with user, timestamp, and exit code.
RBAC policies
Per-user, per-machine access control enforced at the portal.
JWT authentication
Bcrypt-hashed credentials with short-lived JWT tokens.
Zero open ports
Agent connects outbound — your firewall stays closed.
Install the agent on any machine and see it appear in your dashboard in under 5 minutes.