Old way — open ports
Router forwards 22 / 8080 from the public internet into your LAN.
Inbound ports
Port-forward rules
AidaIDE Cloud Portal opens a secure reverse tunnel from your desktop to a hosted gateway — no port forwarding, no VPN, no static IP. Access your full IDE from any browser.
Old remote-access setups punch holes in the firewall. Cloud Portal never listens inbound — your PC dials out once and keeps an encrypted reverse tunnel.
Router forwards 22 / 8080 from the public internet into your LAN.
Your PC opens one outbound WebSocket. Nothing listens on your router.
Bottom line: you do not open SSH, RDP, or HTTP on the router. Collaborators hit the AidaIDE gateway; your machine keeps the session alive from the inside.
No infrastructure to manage. Enable the tunnel in Settings, share the link, done.
Open AidaIDE → Settings → Cloud Portal. One click starts the enrollment and opens the reverse tunnel from your machine to the hosted gateway.
From your portal dashboard at aidaide.app/dashboard, add collaborators by email and assign them a permission group. They need an AidaIDE account — nothing else.
Collaborators open the portal in their browser. All traffic flows through the encrypted tunnel. You stay in control — approve or deny sensitive actions in real time.
Cloud Portal ships with enterprise-grade access control baked in — no plugins, no config files.
Four built-in permission groups — Owner, Trusted, Collaborator, Read-Only. Every action (file reads, writes, shell, terminal) maps to Allow, Deny, or Prompt-host. Fully customisable.
Give external collaborators temporary access without a paid seat. Pro includes 1 concurrent slot; Teams Pro includes 5. Add more at $12/yr each.
Sensitive operations — file writes, terminal interaction, project changes — can be set to require your live approval before execution. You see the request; you decide.
Every action taken through the portal is logged with timestamp, actor, and outcome. Stored on your device, retained for 365 days by default.
Guests who go idle are warned at 4 minutes and automatically disconnected after 30 more seconds. No lingering open sessions when nobody's actively working.
Your device is issued a unique ECDSA P-256 certificate on enrollment. Every tunnel connection is mutually authenticated — no shared secrets, no static credentials.
The browser workspace is where most remote sessions actually happen, so it gets the things you stop noticing until they're missing.
Arrow-key back through what you've run, in the browser, the same way you do in a local shell. This was the biggest remaining gap between the web terminal and the desktop app — it's closed.
The PTY resizes with the browser instead of being pinned to 120 columns. htop, vim, and anything else that draws to the full width render correctly on a wide monitor.
Pin the view to read something in a stream that's still moving, then jump back to following the tail. When scrollback is trimmed, the terminal says so rather than silently dropping lines.
Font size is adjustable in the web terminal itself, from 6 to 40 point, with a reset. Browser page zoom scaled the whole app and fought the layout; this scales the text you're reading and reflows the PTY to match.
Settings → Cloud Portal shows live status for the local web server with Start and Restart beside it. When it fails to come up you get the real reason rather than a portal that silently never answers.
Corporate antivirus that scans HTTPS re-signs certificates on the way through, which used to break enrollment on a clean machine. AidaIDE now trusts the Windows certificate store, so a new PC enrolls without a workaround.
The dashboard verifies that a device is reachable instead of repeating a stale "online" claim, and the Fleet sidebar shows a real error with a Retry when the server fails — not an empty list that reads like you own nothing.
The Grid Viewer labels every feed Live, Stale, Connecting, or No signal. A frozen frame from four minutes ago no longer looks like a working camera.
Mouse input works in desktop browsers, keys the browser doesn't map no longer break the session, and you can pan around a screen larger than your window or paste an image straight in.
Every device gets four built-in groups. Assign collaborators to a group and the permissions enforce themselves — no scripting required.
Cloud Portal is not an add-on. Every Pro and Teams Pro license includes it. Pay only if you need extra concurrent guest slots.
Desktop is Free forever. Cloud Portal ships with AidaIDE Pro — from $19/mo (Teams Pro $70/mo). Turn on the tunnel and it’s on.
Get Pro — from $19/mo