Book a demo

Your private apps.
Safe devices only.

neartrust checks every device and person, opens one app at a time, and logs every request. No VPN.

Book a demo How it works
A device's health: OS version, security patch, disk encryption, screen lock and firewall all pass

Four checks.
Then one app opens.

Nothing reaches an app unchecked.

M
Sara's MacBook PromacOS 26.1
Disk encryptionChecking…Passed
Screen lockChecking…Passed
FirewallChecking…Passed
Security agentChecking…Passed
DeviceChecking…Healthy

Features

The neartrust app

What people install. It lists their apps, opens them in one tap, and asks for the rest.

Devices
iPhone, iPad, Mac, Android, Windows
Servers
Linux, for servers and connectors
Join
Invitation code or QR
Access
Open in one tap, or request
Device health
Shown in the app, with a fix
Organizations
More than one per device
Updates
Automatic. Roll out with MDM.
Languages
English, Arabic
neartrust
The neartrust desktop app: the apps you can open, and the ones you can request
The neartrust iPhone app

Access

WebSSHRDPDatabaseTCPKubernetes
Grant to
Group, person or device
Time limits
4 hours, 1 day, permanent
Failed check
Session ends at once

Device checks

Disk encryptionChecking…Passed
Screen lockChecking…Passed
FirewallChecking…Passed
OS versionChecking…Passed
Also checks
Security agent, root, patch age
Policy
Per device type
Hardware proof
App Attest, Play Integrity

People and admins

SSara AlqahtaniOwner
OOmar AlharbiApprover
LLina HaddadAuditor
Joining
One-time invitation
Admin sign-in
Passkey
Sensitive apps
Key tap to approve

Logs and alerts

Access log kept up to730 days
Logged
Every connection and request
Alerts
New country, impossible travel, location off
Export
Kafka, NATS, RabbitMQ, SQS

Network

TLS 1.3Mutual TLS on every connection
Inbound ports
None
Device keys
Stay in hardware
Policy lost
New connections stop

Your cloud. Your keys.

You run it. Your data stays with you.

  • Runs in your cloud.Your servers, your database, your logs.
  • Keys in your vault.Signing keys stay in your KMS or HSM.
  • No open ports.A connector dials out from your data centre.
  • Always on.Two sites at once. If one goes down, the other keeps working.
  • No fake servers.Every organization is verified, so staff can't join an impostor.
Your deploymentVerified
Control planeYour cloud
KeysYour KMS / HSM
Sites2 active

See it on your own apps.

We'll walk your team through it.

Book a demo