Skip to content
ControlIT

Internet Is the New LAN

Endpoint management, remote connectivity, web control and identity, in five products.

Nothing Listens on the Internet

No inbound ports, no public IPs, no VPN concentrator. Every endpoint dials out.

ControlIT Core

RMM for Windows and Linux: monitoring, helpdesk, patching, automation and remote support.

ControlIT 24x7 ITOps

Core's RMM and a private network over the internet, run 24x7 by Computer Port as SaaS or by your team on-prem.

ControlIT Secure Access & AD Anywhere

Zero-trust remote connectivity to your own infrastructure, and your Active Directory over it.

ControlIT Web Gateway

Control and secure internet access for every user, branch and remote laptop.

ControlIT Identity

Single sign-on and MFA for every app, with access by group and an audit trail.

Five Products, SaaS or On-Prem

Hosted by Computer Port, or on infrastructure you nominate. The same product either way.

User plus Device plus Identity plus Policy equals Corporate Network.

The enterprise network is no longer defined by a building. It is defined by secure connectivity, identity and policy.

What the architecture guarantees.

Architecture flow: endpoints, Domain Controllers and file shares inside your network open one encrypted outbound path to the control plane, hosted by us or on infrastructure you nominate. Attempts to connect inward from the internet find nothing listening.
  1. Nothing Exposed

    No inbound ports. No public IPs. No VPN concentrator.

    Endpoints dial out to the overlay. Nothing you run has to listen on the internet.

  2. Same Directory

    No hybrid join. No directory sync to a vendor cloud.

    Your Active Directory stays where it is, and stays yours.

  3. One Place to Run It

    Access, identity and operations in one console.

    Windows and Linux endpoints, reached and run from the same place.

1,000+Devices under one ControlIT implementation, for a major solar cell manufacturer. Client name withheld.

Five products. Take one, or all five.

Each stands on its own, and every one is available as SaaS or on-prem.

ControlIT Core

RMM for Windows and Linux: monitoring, helpdesk, patching, automation and remote support.

  • Monitoring and Alerting
  • Helpdesk and Ticketing
  • Patch Management
  • Automation and Scripting
  • Remote Support
Illustrative ControlIT Core console: a fleet overview with endpoints across sites, a patch rollout moving ring by ring, an alert that is acknowledged and becomes a helpdesk ticket, and a remote session opened outbound. Sample data only.

ControlIT 24x7 ITOps

Core's RMM and a private network over the internet, run 24x7 by Computer Port as SaaS or by your team on-prem.

  • Endpoint Management
  • Private Network Over the Internet
  • Zero-Trust Network Access
  • Sites, Servers and Cloud
  • Remote Access to Internal Systems
  • 24x7 Operations
Illustrative ControlIT 24x7 ITOps console: four sites on the private network, an hour strip that fills through the night, and an operations log of overnight work by the Computer Port team: a patch window, an alert, a branch link restored, a script and a ticket closed before office hours. Sample data only.

ControlIT Secure Access & AD Anywhere

Zero-trust remote connectivity to your own infrastructure, and your Active Directory over it.

  • Private Network Over the Internet
  • Zero-Trust Network Access
  • Sites, Servers and Cloud
  • Remote Access to Internal Systems
  • Domain Logon and Group Policy Over the Internet
  • Remote Domain Join
  • No Entra ID, No Connector
Zero-trust remote connectivity: remote staff and branches join one private network over the internet links they already have, every connection decided by user, device and group, and reach your own infrastructure across it: Active Directory for domain logon and Group Policy, file servers, ERP and intranet apps, and RDP and SSH to servers.

ControlIT Web Gateway

Control and secure internet access for every user, branch and remote laptop.

  • URL and Category Filtering
  • Application Control
  • Malware and Phishing Protection
  • User and Group Policies
  • Logging and Reporting
Illustrative ControlIT Web Gateway console: a live log of internet requests with the user and group, the destination and its category, the verdict and the policy that matched, beside request, block and user counters, the top blocked categories and a bandwidth trace. Sample data only.

ControlIT Identity

Single sign-on and MFA for every app, with access by group and an audit trail.

  • Single Sign-On
  • Multi-Factor Authentication
  • Identity and Access Management
Illustrative ControlIT Identity sign-in: a user signs in, confirms a time-based one-time password, and single sign-on opens the apps their group allows, while an audit log records each step. Sample data only.

Compare all five.

Every feature, and which product carries it. Take one, or put them together.

The five ControlIT products compared feature by feature: ControlIT Core, ControlIT 24x7 ITOps, ControlIT Secure Access & AD Anywhere, ControlIT Web Gateway and ControlIT Identity. A tick means the product includes the feature.
FeatureControlIT CoreControlIT 24x7 ITOpsControlIT Secure Access & AD AnywhereControlIT Web GatewayControlIT Identity
Endpoint Management
Monitoring and AlertingIncludedIncludedNot includedNot includedNot included
Helpdesk and TicketingIncludedIncludedNot includedNot includedNot included
Patch ManagementIncludedIncludedNot includedNot includedNot included
Automation and ScriptingIncludedIncludedNot includedNot includedNot included
Remote SupportIncludedIncludedNot includedNot includedNot included
Remote Connectivity
Private Network Over the InternetNot includedIncludedIncludedNot includedNot included
Sites, Servers and CloudNot includedIncludedIncludedNot includedNot included
Remote Access to Internal SystemsNot includedIncludedIncludedNot includedNot included
Zero-Trust Network AccessNot includedIncludedIncludedNot includedNot included
Active Directory
Domain Logon and Group Policy Over the InternetNot includedNot includedIncludedNot includedNot included
Remote Domain JoinNot includedNot includedIncludedNot includedNot included
No Entra ID, No ConnectorNot includedNot includedIncludedNot includedNot included
Web Gateway
URL and Category FilteringNot includedNot includedNot includedIncludedNot included
Application ControlNot includedNot includedNot includedIncludedNot included
Malware and Phishing ProtectionNot includedNot includedNot includedIncludedNot included
User and Group PoliciesNot includedNot includedNot includedIncludedNot included
Logging and ReportingNot includedNot includedNot includedIncludedNot included
Identity
Single Sign-OnNot includedNot includedNot includedNot includedIncluded
Multi-Factor AuthenticationNot includedNot includedNot includedNot includedIncluded
Identity and Access ManagementNot includedNot includedNot includedNot includedIncluded
Service and Delivery
24x7 OperationsNot includedIncludedNot includedNot includedNot included
SaaS or On-PremIncludedIncludedIncludedIncludedIncluded
Configured by Computer PortIncludedIncludedIncludedIncludedIncluded
Explore →Explore →Explore →Explore →Explore →

How the internet becomes your network.

Everything dials out to one private overlay. Private traffic reaches your directory and applications directly; internet traffic leaves through the Web Gateway, where policy decides.

Access architecture: remote users, branches and cloud workloads dial out to one private network over the internet, ControlIT Secure Access & AD Anywhere. Private traffic reaches Active Directory and internal applications directly. Internet traffic leaves through ControlIT Web Gateway, where policy allows it out to the internet or stops it at the gateway.
  1. Connect

    ControlIT Secure Access & AD Anywhere

    Remote staff, branches and cloud dial out to one private network over the internet, every connection decided by user, device and group. No inbound ports, no public IPs, no VPN concentrator.

  2. Control

    ControlIT Web Gateway

    Internet traffic leaves through the Web Gateway, where user and group policy decides what is allowed, and every request is logged by who asked.

  3. Extend

    ControlIT Secure Access & AD Anywhere

    Your Domain Controllers answer across the same network: domain logon, Group Policy and remote domain join, with no Entra ID and no connector.

Many vendors, or one.

Every row is a set of products somebody is already licensing. The right-hand column is the one ControlIT product that does the same job.

Each ControlIT product against what an organisation normally licenses separately to get the same job done.
ProductWhat that usually meansWith ControlIT
ControlIT CoreA remote monitoring and management product, a separate service desk, a patch tool and a remote support toolMonitoring, helpdesk, patching, scripts and remote support in one product
ControlIT 24x7 ITOpsAll of that, a VPN, and someone on call overnightCore and a private network over the internet, run 24x7 by Computer Port as SaaS or by your team on-prem
ControlIT Secure Access & AD AnywhereA VPN concentrator on a public address, and hybrid join or a cloud connector for Active DirectoryZero-trust access to your infrastructure and your Active Directory over the internet, with nothing published
ControlIT Web GatewayA cloud web security subscription, or a filtering appliance at head officeURL, category and application policy for every user, branch and remote laptop
ControlIT IdentityAn identity vendor and a separate MFA vendor, each with its own per-user feeSingle sign-on and MFA with access by group, and no per-user identity fee

Every row above is a renewal someone on your team is already managing.

Internet Is the New LAN

SaaS or on-prem. Every product.

The same product either way, whichever of the five you run. Computer Port configures it around your sites, your users and your rules, and nothing on your network has to be published for it to work.

SaaS
Hosted by Computer Port. We run and maintain the platform; your team gets the console.
On-Prem
On infrastructure you nominate. The platform is stood up inside your estate and stays there.

ControlIT 24x7 ITOps

Want it run around the clock? Core's RMM and a private network over the internet, operated 24x7 by the Computer Port team as SaaS, or by your own team on-prem.

Coverage bar: twenty-four hours of the day, every hour covered under ControlIT 24x7 ITOps.
24x7Every hour of the day, covered

What changes on Monday morning.

Everyday situations with a VPN and a separate identity and management stack, and the same situations with ControlIT.
SituationWith a VPN and a separate stackWith ControlIT
Endpoints and patchingPatches and alerts spread across tools, checked when someone has time.ControlIT Core: monitoring, helpdesk, patching and remote support in one RMM.
Out of hoursAlerts wait until morning, or an on-call rota covers them.ControlIT 24x7 ITOps: the same RMM and private network, run 24x7 by Computer Port as SaaS or by your team on-prem.
A laptop at homeLogon fails before the tunnel is up.ControlIT Secure Access & AD Anywhere: domain logon from home, with no tunnel to wait for.
Reaching a serverRDP behind a port forward, or a jump host on a public IP.Zero-trust access to internal systems, with no port forward and nothing published.
A vendor who needs to get inA VPN account, and a whole subnet to trust them on.Zero-trust access: the vendor reaches only what policy allows.
Internet access for remote staffFiltered at the office, unfiltered once the laptop leaves it.ControlIT Web Gateway: the same URL and category policy, wherever the laptop connects from.
Signing in to applicationsAn identity vendor, kept fed by a directory sync.ControlIT Identity: single sign-on and MFA on the directory you already run. No hybrid join.
Proving what happenedAccess logs collected from four consoles at audit time.Access, session and admin events in one place, aligned to CERT-In reporting.
Four separate tools, four consoles and four vendors, converging into one ControlIT console: one login, one policy set, one audit trail.

Five products, SaaS or on-prem. One platform.

Your Active Directory Doesn't Need Azure to Leave the Building.

Head office, home, a branch or a plant. One outbound path, the directory you already run, and nothing published to the internet.

Is ControlIT a Fit?

Five questions that actually disqualify. Your answers stay in this browser.

Answer all five to see where to start.

  1. You run Active Directory on your own servers today.

  2. Remote or multi-site users need domain resources, not just email.

  3. You rely on a VPN, a port forward or a jump host to reach machines.

  4. You own the IT or the security decision.

  5. You can run a pilot on real endpoints, not a lab.

Start Here

Three ways in. Each one ends with something written down.

No per-user identity fee. Priced per deployment, so the teardown below is the fastest way to a number.

Sequence diagram: a 45 minute review, then a 14 day pilot, then a rollout scoped with you. You can stop after any stage and keep what was written down.
Stop after any stage and keep what we wrote downReview45 minutesPilot14 daysRolloutScoped with you
  1. See It on Your Endpoints

    A pilot with the success criteria agreed first: domain logon from home, Group Policy applied on a remote laptop, a file share that works, RDP with no public port, and MFA on the same identity.

    14 days

  2. Count What the Stack Costs

    We add up the VPN, the identity vendor, the MFA vendor and the remote access tool you run today, against one deployment. Your figures, not ours.

    60 min

  3. Review Your Directory

    We look at Active Directory, remote access and the branch links, and you leave with a one page verdict: keep the VPN, move to Entra, or run the overlay.

    45 min

The questions that decide it.

01Kerberos and LDAP over the overlay

Kerberos, LDAP and SMB travel from the client to your Domain Controller inside the encrypted overlay, as if both were on the same LAN. Nothing is published, and nothing is handed to a cloud identity provider.

02Do we need Entra ID or Microsoft 365?

No. ControlIT does not require hybrid join or a directory sync, and it does not replace the directory you run. If you already use Microsoft 365, nothing about that changes.

03Is ControlIT SaaS or on-prem

Either, for every product. Computer Port can host it as SaaS and hand your team the console, or stand it up on infrastructure you nominate so it never leaves your estate. The product and the architecture are the same either way; only the hosting decision changes.

04What happens when the internet drops

Local users keep local Active Directory, local shares and cached logon. Remote access over the overlay waits for the path to return: the same failure domain as a WAN link today, without a concentrator to fail first.

05What gets logged for an audit

Access events, admin actions, sessions and configuration changes are recorded against your deployment, with retention you agree, and reporting aligned to CERT-In requirements.

06What is the difference between Core and 24x7 ITOps

ControlIT Core is the RMM on its own: monitoring, helpdesk, patching, automation and remote support. ControlIT 24x7 ITOps is Core's RMM plus the zero-trust private network over the internet, run 24x7 by Computer Port as SaaS or by your team on-prem.

Close the ports.Keep the directory.

Tell us what your endpoints, sites and directory look like today. We will tell you what the overlay would change, and what it would not.