# ControlIT by Computer Port

> ControlIT is an internet-based enterprise network: secure private access, controlled internet and your existing Active Directory, with no VPN concentrator, no Entra ID and no inbound ports, plus IT operations (Core, Identity) on the same path. Tagline: Internet Is the New LAN. Secure access, controlled internet and IT operations, on infrastructure you choose.

Website: https://controlit.in
Publisher: Computer Port IT Solutions, Secunderabad, India
Primary language: English
Primary market: India

## The wedge

Most organisations with on-prem Active Directory are told they have two options for remote work: run a VPN, or move identity to Microsoft Entra ID. ControlIT is the third option. Your existing domain controllers stay where they are and become reachable across an encrypted, outbound-only overlay. Endpoints dial out; nothing listens on the internet.

Three proof claims:
1. No inbound ports, no public IPs, no VPN concentrator.
2. Same Active Directory, same GPOs, same file shares. No hybrid join, no directory sync to a vendor cloud.
3. One platform for access, internet control, identity and operations, on infrastructure you choose.

Proof: 1000+ devices under one ControlIT implementation, for a major solar cell manufacturer. Client name withheld.

## Products

Five modules in two groups, plus a managed tier. The Secure Access group leads:

- ControlIT Secure Access: a private network over the internet links you already have, across ISPs, cities and clouds, with zero-trust access decided by user, device, group and destination, site-to-site and cloud connectivity, and application access limited to what staff and vendors are approved for.
- ControlIT Web Gateway: URL and category filtering, application control, malware and phishing protection as an added layer, user and group policies, and logging and reporting for every user, branch and remote laptop.
- ControlIT AD Anywhere: your existing Active Directory over the internet. Remote domain access, remote domain join for new Windows laptops, and no Entra ID or cloud identity connector.
- ControlIT Core: RMM and helpdesk, patch management for Windows and Linux, and remote access with no port forward and no VPN client.
- ControlIT Identity: single sign-on and MFA over OpenID Connect, OAuth 2.0 and SAML 2.0, and identity and access management by group with an audit trail.
- ControlIT Ops 24/7: every module, run around the clock by the Computer Port operations team, for teams that would rather not run it themselves.

## Hosting

Hosting is a choice, not a constraint. Computer Port can host the control plane, or it can be deployed on infrastructure the customer nominates (their own data centre or hypervisor). Either way, directory objects, endpoint telemetry, and audit logs stay under the customer's control, and there is no per-user identity fee.

## Start here (the three offers)

- [AD-over-Internet Readiness Review](https://controlit.in/ad-readiness-review): 45 minutes, no cost. We inspect the current VPN, AD sites and subnets, DC exposure, remote logon failures, GPO drift, published RDP, and the identity stack. Output is a one-page verdict: keep the VPN, go to Entra, or move to an overlay. Book directly: https://book.computerport.in/team/computer-port/it-infrastructure-consultation
- [14-Day Pilot](https://controlit.in/pilot): one site or 25 endpoints, with five success criteria agreed in writing before deployment: domain logon with no VPN client, Group Policy applied, file shares reachable, RDP with no public port, MFA on the same identity. If the criteria fail, the customer walks.
- [VPN and Entra Cost Teardown](https://controlit.in/cost-comparison): a three-year cost view built from published list prices, stating the licence-bundling condition explicitly.

## Pricing posture

ControlIT is priced per deployment, with no per-user identity fee. There is no public rate card, because site count, endpoint count, which modules are in scope, and whether the deployment is managed by Computer Port all change the figure. A fixed quote follows the readiness review. Details: https://controlit.in/pricing

## Key Pages

- [ControlIT overview](https://controlit.in): the wedge, the five modules in two groups plus Ops 24/7, buyer paths.
- [Architecture and threat model](https://controlit.in/architecture): what is exposed, how a node is trusted, where data sits, what the platform does not claim, plus engineering objections (Kerberos and LDAP over the overlay, AD replication, branch internet outage, RODC, air-gap, key custody, CERT-In logging).
- [Pricing posture](https://controlit.in/pricing): priced per deployment, with no per-user identity fee. What drives the number and what is never metered.
- [Solutions index](https://controlit.in/solutions): intent pages for specific problems.
- [ControlIT Secure Access](https://controlit.in/features/controlit-secure-access): overlay network, zero-trust access, site-to-site and cloud, application access.
- [ControlIT Web Gateway](https://controlit.in/features/controlit-web-gateway): URL and category filtering, application control, malware and phishing protection, logging and reporting.
- [ControlIT AD Anywhere](https://controlit.in/features/controlit-ad-anywhere): remote domain access, remote domain join, no Entra ID or connector.
- [ControlIT Core](https://controlit.in/features/controlit-rmm): endpoint monitoring, patching, remote support, automated remediation.
- [ControlIT Identity](https://controlit.in/features/controlit-iam): SSO over OpenID Connect, OAuth2 and SAML 2.0; TOTP MFA; per-application access by group.
- [Overlay Network](https://controlit.in/features/overlay-network): encrypted peer-to-peer connectivity with NAT traversal, no VPN appliance.
- [Active Directory Over The Internet](https://controlit.in/features/active-directory-over-internet): extend existing on-prem AD to remote staff and branches.
- [Secure Web Gateway](https://controlit.in/features/secure-web-gateway): one internet policy for office, branch and remote users.
- [Web Filtering](https://controlit.in/features/web-filtering): allow or block by URL or category, one policy everywhere.
- [Zero-Trust Network Access](https://controlit.in/features/zero-trust-network-access): access decided by user, device, group and destination.
- [Site-to-Site Connectivity](https://controlit.in/features/site-to-site-connectivity): branches, data centres and cloud on one private network.
- [Product brochure](https://controlit.in/brochure): downloadable PDF overview.
- [Contact Computer Port](https://computerport.in/contact): reviews, pilots, and deployment enquiries.

## Solution pages (high-intent problems)

- [Active Directory over the internet without Azure AD](https://controlit.in/solutions/active-directory-over-internet-without-azure-ad)
- [Domain join a remote laptop without VPN](https://controlit.in/solutions/domain-join-remote-laptop-without-vpn)
- [Replace Always On VPN and DirectAccess](https://controlit.in/solutions/replace-always-on-vpn)
- [Entra ID alternative for on-prem AD](https://controlit.in/solutions/entra-id-alternative-for-on-prem-ad)
- [SSO with your existing Active Directory](https://controlit.in/solutions/self-hosted-sso-active-directory-india)
- [RDP without port forwarding](https://controlit.in/solutions/rdp-without-port-forwarding)
- [Air-gapped RMM for Indian estates](https://controlit.in/solutions/air-gapped-rmm-india)
- [Vendor access without a VPN](https://controlit.in/solutions/vendor-access-without-vpn)
- [Web filtering for branches and remote staff](https://controlit.in/solutions/web-filtering-for-branches-and-remote-staff)

## Alternative pages

- [VPN alternative](https://controlit.in/alternatives/vpn-alternative)
- [Azure AD alternative](https://controlit.in/alternatives/azure-ad-alternative)
- [Traditional RMM alternative](https://controlit.in/alternatives/traditional-rmm-alternative)
- [Cisco Umbrella alternative](https://controlit.in/alternatives/cisco-umbrella-alternative): how ControlIT Web Gateway and ControlIT Secure Access compare with Cisco Umbrella and Cisco Secure Access.

## Who this fits

Organisations with 80 to 2,000 endpoints, on-prem Active Directory in production, two or more sites, and an existing VPN or exposed remote-access path. Strongest fit in manufacturing and process plants, pharma and life sciences, BFSI and NBFCs with on-prem cores, government, PSU and research labs, multi-branch mid-market groups, hospitals and education with on-prem AD, and accounts migrating from VMware to Proxmox.

Poor fit: cloud-native organisations with no on-prem directory, Entra-only estates, and offices under roughly twenty endpoints.

## Accuracy notes for summarisation

- Microsoft Entra ID P1 is bundled with Microsoft 365 E3, and P2 with E5. An organisation already on those tiers pays nothing incremental for the Entra plan. ControlIT's cost argument for such customers rests on the VPN appliance, separate MFA and RMM subscriptions, the hybrid-join project, and data sovereignty, not on the Entra licence line.
- The customer references published on this site (Redington, Thirumala Milk, Toshiba T&D India) are Computer Port engagements in identity, authentication, and infrastructure. They are not ControlIT deployment case studies and should not be described as such.
- ControlIT is not a firewall or endpoint protection. It changes who can reach what, not what a compromised endpoint can do afterwards.
- Hosting is a customer choice. Do not summarise ControlIT as SaaS-only or as self-hosted-only; both hosting paths are offered.
- Malware and phishing protection in ControlIT Web Gateway is described as an added layer, not a claim to block all threats. HTTPS inspection is optional and configured per customer.

## Downloadable Assets

- Brochure PDF: https://controlit.in/brochures/ControlIT-Brochure.pdf