TotalHealRemoteLinkRemote Access & Support
Consented, recorded remote support for Macs and Windows PCs, and audited shells on Linux servers.
Trial: 30 days. You sign in to the TotalHeal console with a Sttiz account and activate RemoteLink Remote Access. No card.
IT teams need to see and fix a user’s computer, or open a shell on a server, without a permanently open remote-desktop port or an unaudited third-party tool. Auditors want proof of who connected, why, with whose consent and what was done.
Screen view or full control from the web console, started only from a signed command over the device’s existing outbound channel — no inbound port on the device.
RemoteLink Remote Access, feature by feature.
View or control from the browser
Screen view or full control of an enrolled Mac or Windows PC from the web console.
Consent on the device
A native consent dialog — always on personal devices, on corporate devices unless policy turns it off. No answer in 60 seconds declines.
Optional second approver
A second person must approve; the requester can never approve their own session.
Sealed, encrypted recordings
Server-side recording, sealed with SHA-256 and encrypted at rest with a per-organisation key you can rotate, with chain of custody and time-limited playback links.
Always visible to the person
An on-screen indicator with “End session” for the whole session; keystrokes are never injected into password fields.
Files and clipboard, off by default
File transfer both ways is consented separately, size and type limited, scanned before it is written and encrypted at rest. Clipboard sharing is off by default.
Remote Shell for servers
Linux servers (and desktops if enabled): approval for production and root, risky-command blocking, recordings with integrity check and command search.
Limits you set
Maximum duration 5–480 minutes, idle timeout 1–120 minutes, one live screen session per device.
Finds other remote tools
Detects other remote tools and OS sharing services on the device and offers to turn them off. Every step lands in the hash-chained audit.
How RemoteLink Remote Access works.
RemoteLink lets IT see and fix a Mac or Windows PC, or open a shell on a Linux server, without an open remote-desktop port or an unaudited third-party tool. The person at the device consents, a second approver can be required, and every session is recorded and sealed.
- RequestA technician opens a session from the console with a reason.
- ApproveOptionally a second person approves; the requester never approves their own session.
- ConsentThe person at the device accepts in a native dialog; no answer in 60 seconds declines.
- WorkView or control, with an on-screen indicator and End session always visible.
- SealThe recording is sealed and encrypted, with time-limited playback for auditors.
Platforms and deployment
Platforms
| Platform | How it is covered |
|---|---|
| macOS and Windows desktops | Screen sessions — TotalHeal desktop agent 0.3.4 or later |
| Linux servers | Remote Shell — TotalHeal server agent (off until enabled) |
| Viewer | TotalHeal web console in a current browser |
Deployment
| Profile | Status |
|---|---|
| SaaS (India region) | Available |
| On-premises | AvailableDelivered with our team from the on-premises kit. |
| Air-gapped | AvailableOffline kit, offline licence file and offline update bundles. |
Unit and tiers.
Priced per concurrent technician per year. Counted: concurrent sessions per technician seat; managed endpoints are not counted. List prices are not published yet — our team quotes per unit and term.
| Business | Enterprise | |
|---|---|---|
| Screen sessions, consent, recording, approval, file transfer, clipboard, multi-monitor, Remote Shell | Included | Included |
| Recording retention options, dual-consent policies | — | Planned |
| Price | Contact sales | Contact sales |
Today every Remote Access feature is open at Business; the Enterprise depth above is the commercial plan.
Government profile. Government is a profile, not a separate tier or price list: the Elite tier with Government defaults switched on — data residency in India, four-eyes approval of policy changes, a distinct approver for every approval-level action, retention of at least 180 days, and the CERT-In and DPDP reporting clocks.
What you need
- Enrolled device with the TotalHeal desktop agent (or server agent for shells)
- Outbound HTTPS/WebRTC from the device and the viewer
- The person at the device present to consent (unless the corporate-consent switch is off)
Procurement documents for RemoteLink Remote Access
The datasheet is public. The full dossier is sent on request, so we can match it to your tender.
- Datasheet. What the product does, platforms, deployment profiles, tiers and honest limits.
- Compliance matrix. Each requirement marked comply, partial or no, with an evidence reference — CERT-In directions, DPDP, ISO 27001 controls touched, accessibility of the console, data residency.
- Bill of materials. SKUs per sizing, the unit and quantity formula, customer-side components and services.
- Architecture and hardening. How the product is deployed and the hardening guidance for each component.
- SLA. Support tiers, response targets the team can meet, update cadence and end-of-life policy.
- OEM authorisation letter. A MAF template for resellers and system integrators, with product names exactly as on the SKU.
Works well with
Part of TotalHeal Endpoint Operations suite and of Complete — each product is still licensed on its own.
TotalHealDeviceSphere
Unified Endpoint Management (UEM)
Enrol, configure, update and secure every laptop, phone and tablet from one console.
TotalHealPrivilegeVault
Privileged Access Management (PAM)
Vault admin passwords, broker sessions without revealing them, record everything and rotate afterwards.
TotalHealPatchPilot
Patch Management
See what is missing on every computer and roll updates out in waves — with proof afterwards.
Get a quote for RemoteLink Remote Access.
Tell us how many concurrent technicians you need and how you want to deploy. We reply with a quote and the procurement documents you ask for.
Or email business@totalhealsecurity.com.