Tetherless Brandmark

Take back your company's privacy

Client-Owned Device Control
and Automation

The first client-centric RMM and MDM stack. Ephemeral execution hosted natively inside your own Microsoft Azure tenant—eliminating vendor lock-in, recurring per-seat taxes, and third-party relay vulnerabilities[cite: 1, 2].

Zero Relay Servers • Client Entra ID Authenticated • Sub-30ms WebRTC
Direct Encrypted P2P
4K Virtual Display 1 (Indirect Display Driver)
RTT: 18ms FPS: 60 Codec: AV1 / WebRTC Relay: 0 Hops (Direct)
PowerShell • Client Azure Lease Verified

tetherless-agent@client-endpoint:~$ verify-session-integrity --lease

[OK] Azure Key Vault ECDSA Token Validated

[OK] Ephemeral Lease: Expires in 00:44:12

> Direct peer channel opened via Azure Container App Spoke[cite: 1].

> Zero vendor relays. Telemetry streaming to client Log Analytics[cite: 1, 2].

> _

Apex Corp Tenant
Device Name OS & Architecture Primary User P2P Latency Status Direct Session
WIN-FLT-9821
Win 11 Pro 24H2 (x64) j.miller@apexcorp.com 18ms Connected In Session • P2P
DESK-ENG-402
Ubuntu 24.04 LTS s.chen@apexcorp.com 24ms Standby
TAB-FLD-019
Android 14 (DPC Owner) m.rodriguez@apexcorp.com 31ms (5G) Standby
MAC-EXEC-11
macOS Sonoma (ARM64) a.vance@apexcorp.com 21ms Standby
Managed Client Directory Azure Lighthouse Mesh
8 Active Tenants • 1,840 Total Seats
Tenant Name Entra ID Domain Endpoints Spoke State Lighthouse Delegation Action
Apex Corp apexcorp.com 250 Active Spoke JIT Lease Granted
BioHealth Labs biohealthlabs.io 620 Scaled to 0 Ready on Demand
Vanguard Logistics vanguardlogistics.net 480 Active Spoke JIT Lease Granted
NorthPeak Legal northpeaklegal.com 125 Scaled to 0 Ready on Demand
Active Licensing Plan
$0.75 / seat
Platform updates • Cryptographic lease validation
Tenant Spoke Engine
v1.4.2
Pion WebRTC Core • IDD Virtual Display 2.1
Licensing Lease Status
Valid & Active
ECDSA Root: auth.tetherless.pro
Tenant Spoke Resource Provisioned Bicep Version Status / Rollout Monthly License Last Lease Check
apexcorp-spoke-aca v1.4.2 (Latest) Current / Patched $187.50 / mo (250 seats) 2 mins ago
biohealth-spoke-aca v1.4.2 (Latest) Current / Patched $465.00 / mo (620 seats) 14 mins ago
vanguard-spoke-aca v1.4.1 (Staged Rollout) Upgrade Pending $360.00 / mo (480 seats) 5 mins ago
Ephemeral Container App
Running (Scale 0 ready)
Resource Group: rg-tetherless-spoke
Client Azure Consumption
$2.38 / mo
Direct client-owned Azure cost[cite: 1]
Identity Authority
Microsoft Entra ID
Scoped via Azure Lighthouse Delegation
11:18:02.102 [ACA] Signaling broker instantiated (Pion/WebRTC)[cite: 1]
11:18:02.148 [AUTH] Ephemeral ECDSA lease granted via Key Vault[cite: 1, 2]
11:18:02.210 [P2P] ICE Candidate paired: Direct UDP hole-punch succeeded[cite: 1]
11:18:02.242 [SECURITY] Video stream established inside tenant isolation perimeter[cite: 1, 2]
For The Client

Tired of fitting your company into your MSP's rigid box?[cite: 1]

  • Tethered to proprietary vendor tools & legacy VPNs[cite: 1]
  • Video feeds & telemetry bouncing through 3rd-party SaaS relays[cite: 1, 2]
  • Your infrastructure held hostage if you switch IT providers[cite: 1]
The Tetherless Fix[cite: 1]: Runs directly inside your Microsoft Azure boundary[cite: 1]. You own your scripts, logs, and gateway permanently[cite: 1].
For The Modern MSP

Tired of paying a per-seat tax on stagnant legacy RMMs?[cite: 1]

  • Thousands wasted monthly on per-endpoint licensing[cite: 1]
  • Centralized targets for devastating supply-chain exploits[cite: 1, 2]
  • View-only screen sharing that can't fix real mobile devices[cite: 1]
The Tetherless Fix[cite: 1]: Disruptive $0.65/seat software license[cite: 1]. Ephemeral serverless containers cost pennies per tenant with pure margins[cite: 1].
For Cloud Platforms

The missing interactive execution plane for Azure.[cite: 1]

  • Intune handles policy, but live remediation requires 3rd-party SaaS[cite: 1]
  • Console Connect routes data outside the customer tenant[cite: 1, 2]
  • No native touch injection across Android & iOS field devices[cite: 1]
The Tetherless Fix[cite: 1]: Sub-30ms peer-to-peer WebRTC streaming with full touch and virtual multi-monitors, 100% tenant-native[cite: 1, 2].
No Contracts • No Annual Traps

Pure Monthly Pricing. Zero Multi-Year Lock-In.

Legacy RMMs trap you in 3-year auto-renewing contracts. Tetherless is 100% month-to-month per seat with a straightforward 60-day cancellation policy. If you ever leave, you own your Azure logs and scripts permanently[cite: 1].

Internal IT

Sovereign Fleet

$0.75 / seat / month

For companies managing their own private IT boundaries. Single-tenant Azure spoke with native Entra ID control.

  • ✔ Full WebRTC Remote Control & IDD Displays
  • ✔ Android Touch & iOS Device Automation
  • ✔ Ephemeral Azure Spoke (Scales to $0)
  • ✔ Month-to-Month (60-day offboarding policy)
Most Popular for MSPs
Modern MSPs

Partner Mesh

$0.65 / seat / month

Volume-pooled across all your managed client tenants. Unified multi-tenant mesh without vendor lock-in.

  • ✔ Everything in Sovereign Fleet
  • ✔ Multi-Tenant Azure Lighthouse Orchestration
  • ✔ Cross-Tenant JIT Delegation & Access Hub
  • ✔ Month-to-Month (Pooled fleet billing)
Regulated / Gov

Enterprise Sovereign

$1.25 / seat / month

Defense, healthcare, and finance requiring strict compliance, air-gapped zones, or Azure GovCloud.

  • ✔ Hardware Security Module (HSM) Key Vault
  • ✔ Azure Government & Sovereign Cloud Support
  • ✔ Dedicated SOC 2 & HIPAA Attestation
  • ✔ Month-to-Month (60-day offboarding policy)
25 devices 1,000 devices 2,500 devices
Tetherless License ($0.75/seat/mo): $187.50 / mo
Client Azure Compute & Logs (Direct to MS): $2.75 / mo
Combined Total Monthly Cost: $190.25 / mo
Legacy 3-Yr Lock-in ($3.00/seat)
$750 / mo
Rigid multi-year commitment
Tetherless + Azure
$190.25 / mo
Month-to-month • 60-day notice
Monthly Fleet Savings
$560 / mo ($6,717 / yr)

Zero-Trust Architecture

How ephemeral execution guarantees client sovereignty without centralized vendor relays[cite: 1, 2].

STAGE 01

Lighthouse Delegation

The MSP accesses the client spoke via Microsoft Entra ID Just-In-Time role delegation. No shared credentials.

STAGE 02

Ephemeral Lease

Azure Key Vault signs a short-lived ECDSA cryptographic lease token. Unused containers scale down to 0 replicas[cite: 1, 2].

STAGE 03

Direct Peer-to-Peer

Browser & endpoint perform direct UDP/WebRTC hole punching. Frames stream peer-to-peer at sub-30ms latency[cite: 1, 2].

STAGE 04

Sovereign Audit Trail

Every keystroke, command, and stream event logs directly into the client's private Azure Log Analytics workspace[cite: 1, 2].

Architectural Pillars[cite: 1]

Peer-to-Peer WebRTC[cite: 1]

Direct encrypted media channels delivering sub-30ms interactive latency without external relay servers[cite: 1, 2].

Universal Touch Injection[cite: 1]

First-class interactive remediation across Android (DPC Device Owner) and iOS (test harness) fleets[cite: 1].

Virtual Multi-Display[cite: 1]

On-demand Indirect Display Drivers (IDD) enabling seamless browser-based remote work across multiple monitors without VPNs.

Air-Gapped Tenant Sovereignty[cite: 1]

Telemetry, session frames, and audit trails remain isolated inside the client's own Azure Log Analytics[cite: 1, 2].