Share CLI tools.Not secrets.

Tools and keys stay on one server. Your team gets a sandboxed browser terminal. You see every session.

Join waitlistHow it works →

Private beta · small batches

deskport · staging-box · priya sample

# session started · priya@acme · policy: backend-dev

$ pwd

/srv/app/api

$ kubectl get pods -n staging

api-7c9f4d-x2kq 1/1 Running 0 3h

worker-5b8d1-pq7 1/1 Running 0 3h

$ terraform apply

bash: terraform: command not found (not in this policy)

# recording → 2026-10-09_priya.cast

$ ▍

Transport

Outbound WebSocket

Sessions

tmux + PTY

Recording

asciicast v2

Policy

Dirs · tools

The problem

Today the keys live in Slack.

# eng-helpillustration

Sam · 10:42

anyone have the staging kube creds?

Ana · 10:43

KUBECONFIG=… token: eyJhbGciOi••••••

Sam · 10:43

thx! I'll delete this after

  1. 01

    Credential sharing

    Keys and tokens pasted into chat. No audit trail.

  2. 02

    Setup friction

    Local installs, env config and VPN before day-one work.

  3. 03

    Zero visibility

    No record of who ran what, against which environment.

  4. 04

    Tools on every laptop

    Every machine holds its own copy of the keys.

Why DeskPort

One place for the keys. One record of what happened.

Credentials stay on your server. Each session sees only what its policy allows, and every session is recorded.

policy · backend-devtemplate
allowedDirs
/srv/app/api
allowedTools
git, kubectl, node
blockedTools
terraform
recording
on

How it works

One server. Your whole team.

ops@staging-boxsample output

$ deskport login

Server URL: wss://your-deskport-host

Agent ID: staging-box

API Key: ••••••••

Configuration saved successfully.

$ deskport start &

$ deskport status

Agent ID: staging-box

Status: running (PID 48211)

  1. 01

    Install the agent

    On a server that already has your CLI tools.

  2. 02

    Add your team

    Invite by email. They get a browser tab.

  3. 03

    Set policies

    Allowed directories and tools, as templates.

  4. 04

    Watch and review

    Live view, recordings and an audit log.

Built for

Anywhere a team shares a terminal.

Features

Every session leaves a record.

audit_logs · acmesample rows
timeeventwhodetail
10:41:07agent.connectedstaging-boxoutbound wss
10:42:15session.startedpriyapolicy backend-dev
10:44:52template.updatedanablockedTools +terraform
10:51:30session.endedpriyarecording saved (.cast)
11:02:09user.invitedanasam@acme.dev

Outbound tunnel

The agent connects out to DeskPort over WebSocket, so your server opens no inbound ports.

Sandboxed sessions

Each session sees only its allowed directories and tools. Everything else is off its PATH.

Live monitor

Watch any session as it happens. Terminal output is mirrored to admins in real time.

Audit log

Logins, session starts and ends, and config changes, recorded with who and when.

Session recording

Asciicast v2 recordings of input and output. Replay any session after the fact.

Self-hostable

Run the API, web app and agent on your own infrastructure.

Pricing

Planned launch pricing.

DeskPort is in private beta. These are the plans we intend to launch with, and they may change.

Starter

$0/mo

3 seats · 1 agent

  • 5 sessions a day
  • Community support
Recommended

Pro

$29/mo

10 seats

  • Session recording
  • Audit log
  • Priority support

Enterprise

$99/mo

50 seats · SSO

  • SAML / SSO
  • Dedicated support

Your tools deserve better than a README.

Stop pasting install steps and API keys into Slack. Give your team a proper, audited way in.

Join waitlist

Private beta

Be first in.

We're onboarding teams in small batches. Leave your email and we'll reach out.