See and fix every machine you run from a browser, without opening a port.

Install the agent with one command. It connects out to Console over TLS and listens on nothing, so it works behind NAT, CGNAT or a firewall with no port forwarding and no VPN. A fresh Debian box shows up in about 15 seconds.

Try it without an account: https://try.cntrl.pw is a live demo with six made-up machines.

From Bridge to Console

I launched Cntrl Bridge here in January. It was a desktop app for Windows and macOS that put an HTTP and WebSocket API for your machine on your local network, with an SDK to build your own controls on. Console is what I built next, for the machines Bridge couldn't reach.

- Bridge listened on your network, so reaching it from outside meant port forwarding or a VPN. Console's agent only connects out, and every machine is reachable from anywhere with nothing open.

- Bridge ran on desktops. The Console agent also runs headless on Linux servers, VPSes and Raspberry Pis.

- Bridge gave you an API to build on. Console is the finished thing: live readings, alerts, checks and actions, with nothing to build.

- Bridge guarded its API with keys and IP lists. Console adds a policy on each machine and signed commands, so even Console can't act on a machine you haven't allowed it to.

Runs on

Linux on x86_64 and ARM (Raspberry Pis included), macOS on Intel and Apple silicon, and Windows in beta. Servers, VPSes, NAS boxes, mini PCs and laptops all work the same way.

What you get

- Live CPU, memory, disk, network, GPU and temperature readings, with each minute's high and low, and the history kept on the machine itself

- Processes, services, Docker and Podman containers, open ports, and storage with drive health

- Logs from every source, with passwords, tokens and keys redacted on the machine before they leave it

- Checks for your sites, ports and TLS certificates, as often as every 30 seconds on Pro

- Alert rules for CPU, memory, disks, temperature, services, containers and machines going offline

- Alerts by email & ntfy, or Discord, Slack and webhooks on Pro, with a second message when the problem clears

- Restart or stop services and containers, stop processes, reboot or power off, once you've allowed it on the machine with one command

- Signed commands, so a breach of Console's database or gateway, or a stolen session, can't restart, stop or power off anything

- People with roles: owners, admins and members

Console has no shell and no file access. Everything it can ask a machine to do is one list in the agent's code.

The agent is open source under the MIT licence: https://github.com/azaek/cntrl

Free for 3 machines, no card. Pro is $8 a month for 25 machines, 3 people and chat alerts.