One security standard for the whole organization
Vexaro brings remote access, security and development together under one support line and one security standard. Vexaro Desk's single sign-on, roles and access rules sit at the core, and mesh networking is in development. A growing organization scales on one standard instead of a stack of disconnected tools.
Built for teams that outgrew per-seat tools
As headcount and sites grow, the hard problems move from features to control. Who can reach what, on which device and under which policy? And who can prove it later?
Security at the core
Encryption in transit, least-privilege roles and an audit log are built into the architecture; audit retention, session recording and SIEM export scale with your plan.
One identity, one policy
Connect your identity provider once and manage people, roles and access in Vexaro Desk from a single console. SSO and directory sync come with the Enterprise plan.
Deploy your way
Start fast in our cloud or, on the Enterprise plan, run Vexaro Desk inside your own perimeter. The product is the same; only the boundary changes.
A named team behind you
Structured onboarding, a migration plan and a direct support channel mean the rollout has owners on both sides instead of a ticket queue.
Centralized admin, from day one
Manage people, roles, devices and access policy for the whole organization from one Vexaro Desk console.
Identity is the control plane. Connect your provider over SAML or OIDC for single sign-on, sync directory groups automatically, and let group membership decide access. Joiners, movers and leavers are then handled where they should be: in your directory.
Single sign-on over SAML 2.0 and OIDC, with your provider as the source of truth.
Automated user and group provisioning via SCIM, so access follows directory membership.
An exportable audit log of access, sessions, and administrative actions for review.
Roles govern the console. Each Vexaro Desk device enforces its own access rules: an access password, an allowlist of Vexaro IDs and default session rights.
Security and compliance: where we stand
We are in early access. Here is what is true today: capabilities and architecture we can stand behind, not certifications we have not earned.
- All sessions and traffic are encrypted in transit. Sessions between Vexaro apps are end-to-end encrypted, directly or through a Vexaro relay, which passes on data it cannot read.
- No implicit trust: every session needs the host's on-screen consent or its unattended password, unattended access can be limited to an allowlist of Vexaro IDs, and each device sets the default rights a session gets (input, clipboard, files).
- Least-privilege roles and per-device access rules, enforced by Vexaro Desk.
- Session and administrative audit logs you can export for your own review.
- Self-hosted mode keeps session data and logs inside your own infrastructure.
We are working toward recognized international certification. We will publish our status and supporting documentation as we reach each milestone, rather than claim a badge before we have earned it. For a current security overview or to start a vendor review, your sales contact can connect you with the right people.
Cloud or self-hosted: your call
Choose the boundary that fits your risk model and regulatory needs.
Managed cloud
We run, update, and monitor the platform. The fastest way to get the whole organization onboarded, with security defaults already in place.
Self-hosted
On the Enterprise plan, run Vexaro Desk inside your own perimeter for full control of data residency and the network boundary. Session data and logs stay in your infrastructure.
One agreement, one support line
An enterprise agreement can cover Vexaro Desk, security services and development work under one support line; Vexaro Mesh is in development, with early access on request. Explore each one.
Vexaro Desk
Remote access and support for Windows PCs and servers, with roles, session recording and audit.
ExploreVexaro Mesh
In development: managed mesh connectivity across offices, data centers and clouds, designed for direct site-to-site tunnels with relay fallback. Early access on request.
ExploreVexaro Security
Security assessment, penetration testing, and ongoing security support from our own specialists.
ExploreVexaro Development
Custom software, integrations, and infrastructure delivered and run by our engineers.
Explore