Features / Remote agent

Remote agent

Reach servers inside any network, no inbound ports

A lightweight agent runs on your control node and polls outbound to the portal. No inbound firewall rules, no VPN gymnastics — it executes against hosts the portal can never reach directly.

Open the console See all capabilities
agent · outbound only
portal
agentcontrol node
firewall · no inbound
01
Firewall-friendly The agent dials out. Nothing needs to be exposed to the internet.
02
Sandboxed execution Runs are confined to an approved playbook directory on the agent host.
03
Self-updating Agents update from a source you pin, with host allow-listing and version gating.

More capabilities

Secure terminal

Audited, recorded SSH sessions through a hardened gateway
Tamper-evident audit log

A cryptographic record of every privileged action
Fleet automation

Run Ansible across thousands of hosts