Product

One control plane over your machines

ollalink wraps a battle-tested remote-desktop engine in a multi-tenant control plane you host yourself. Operators work from the browser; admins manage the fleet; agents drive machines through the same secure path.

Sub-second control

WebRTC P2P with relay fallback keeps input responsive even across networks. Adaptive bitrate scales to the link you have.

One-click connect

Pick a device in the console and a session opens in your browser. No operator-side install, ever.

Workspaces

Each team gets its own fleet. Devices, members, sessions, and usage are scoped and isolated.

Roles & invites

Owner, admin, and member roles. Invite by email; access flows from the workspace, not a shared password.

Audit everything

Connections, member changes, secret rotations, and admin actions are recorded with who, what, and when.

Usage metering

Session-minutes and active-device counts roll up per workspace, ready to gate plans or bill.

Architecture

Your infrastructure, our orchestration

Devices connect to a signaling server you run. The control plane brokers sessions, partitions the fleet into workspaces, and meters usage. Media flows peer-to-peer, relaying through your own TURN — or a relay you choose — when a direct path isn't available.

Nothing about a session is required to leave infrastructure you control.

architecture

browser ──▶ control plane (workspaces, RBAC, billing)
              │  brokers via admin API
              ▼
   signaling server  (you host) ──┐  group ⇄ workspace
              │                    └─ devices, sessions
   live events ◀── webhook ──▶ /events
              ▼
        WebRTC P2P / your TURN relay
              ▼
        remote machine (Win / macOS)

Security

Designed so trust stays with you

Workspace isolation. Every device, session, and key is scoped to a workspace. A god-mode admin token is never exposed to clients — the control plane authorizes every action against the requesting workspace.

Short-lived access. Sessions are brokered with single-use, expiring tokens. Access codes rotate. Device secrets can be rotated on demand.

Auditable by default. Connections, role changes, and admin actions are written to an append-only log you can export.

Self-hosted email & errors. Wire your own SMTP and error tracking — no third-party SaaS is required to run the stack.

See it on your own machines

Install the host, point it at your signaling server, and connect from the browser.

Quickstart →