SSH · 5 min read
Is browser-based SSH secure?
A walk through the actual threat model of browser-based SSH, what it trades away, and what it gains. The answer isn't a one-liner, but it's close.
Read article
Blog
All posts, page 2
SSH · 4 min read
SSH access without sharing private keys
Why key-sharing is the silent disaster in most ops teams, and a practical pattern for getting rid of it without a six-month rewrite of how you do access.
Read article
Server Monitoring · 3 min read
The cost of slow visibility in IT operations
Every minute between symptom and visibility has a dollar attached. The math is worth working through, because it points directly at where to close the visibility gap.
Read article
Port Forwarding · 3 min read
Secure port forwarding without exposing services
Port forwarding gets services reachable, and accidentally everyone else. Here are patterns for controlled forwarding that do not turn firewalls into rubber stamps.
Read article
Remote Access · 3 min read
Why remote access should never be a standalone tool
Remote access without context is just a shell in the dark. Access, monitoring, and audit belong on one surface rather than three separate purchases.
Read article
Security · 2 min read
Security trade-offs of browser-based access
Browser-based access removes VPNs and shared keys, but it is not a free lunch. The honest trade-off list is short, and every item on it is mitigatable.
Read article
Remote Access · 4 min read
How VPN-free remote access works
What the outbound-agent model actually does, versus what a VPN does. Written because enough people have asked variations of 'so how is this different from Tailscale?'
Read article
SSH · 3 min read
Browser SSH vs traditional SSH: what actually changes
We put a team on browser-based SSH for six months. What genuinely changed day-to-day, what turned out not to matter, and the two places new operators still get stuck.
Read article
RMM · 3 min read
Lightweight RMMs vs enterprise tools: what small teams need
Small teams pay for friction on enterprise-scale RMM. Picking tooling that moves with you is about knowing which enterprise features are real value and which are overhead.
Read article
LynxTrac · 3 min read
Why we built LynxTrac: remote access without VPN headaches
The short version of why we ended up building our own remote-access platform instead of subscribing to yet another VPN. Mostly a story about tired ops people.
Read article
RMM · 3 min read
Designing an RMM agent that doesn't slow systems down
Every RMM agent is a tax on the host. Designing ours to stay under 1% CPU and 50 MB RSS without dropping signal took a handful of specific choices.
Read article
Server Monitoring · 3 min read
Endpoint health trends: what your monitoring data is telling you
Single-point metrics are thin. Trends over weeks reveal the decisions your monitoring data is trying to surface, if you look for them.
Read article