Old way — open ports
Router forwards 22 / 8080 from the public internet into your LAN.
Inbound ports
Port-forward rules
AidaIDE Cloud Portal opens a secure reverse tunnel from your desktop to a hosted gateway — no port forwarding, no VPN, no static IP. Access your full IDE from any browser.
Old remote-access setups punch holes in the firewall. Cloud Portal never listens inbound — your PC dials out once and keeps an encrypted reverse tunnel.
Router forwards 22 / 8080 from the public internet into your LAN.
Your PC opens one outbound WebSocket. Nothing listens on your router.
Bottom line: you do not open SSH, RDP, or HTTP on the router. Collaborators hit the AidaIDE gateway; your machine keeps the session alive from the inside.
No infrastructure to manage. Enable the tunnel in Settings, share the link, done.
Open AidaIDE → Settings → Cloud Portal. One click starts the enrollment and opens the reverse tunnel from your machine to the hosted gateway.
From your portal dashboard at aidaide.app/dashboard, add collaborators by email and assign them a permission group. They need an AidaIDE account — nothing else.
Collaborators open the portal in their browser. All traffic flows through the encrypted tunnel. You stay in control — approve or deny sensitive actions in real time.
Cloud Portal ships with enterprise-grade access control baked in — no plugins, no config files.
Four built-in permission groups — Owner, Trusted, Collaborator, Read-Only. Every action (file reads, writes, shell, terminal) maps to Allow, Deny, or Prompt-host. Fully customisable.
Give external collaborators temporary access without a paid seat. Pro includes 1 concurrent slot; Teams Pro includes 5. Add more at $12/yr each.
Sensitive operations — file writes, terminal interaction, project changes — can be set to require your live approval before execution. You see the request; you decide.
Every action taken through the portal is logged with timestamp, actor, and outcome. Stored on your device, retained for 365 days by default.
Guests who go idle are warned at 4 minutes and automatically disconnected after 30 more seconds. No lingering open sessions when nobody's actively working.
Your device is issued a unique ECDSA P-256 certificate on enrollment. Every tunnel connection is mutually authenticated — no shared secrets, no static credentials.
Every device gets four built-in groups. Assign collaborators to a group and the permissions enforce themselves — no scripting required.
Cloud Portal is not an add-on. Every Pro and Teams Pro license includes it. Pay only if you need extra concurrent guest slots.
Desktop is Free forever. Cloud Portal ships with AidaIDE Pro — from $19/mo (Teams Pro $70/mo). Turn on the tunnel and it’s on.
Get Pro — from $19/mo