Security principles
Clear rules at the edge so your link stays safe and predictable.
TLS everywhere
Every connection to *.tunnel.asyx.ai is encrypted by default.
Stable, tenant-scoped URLs
You get a memorable link that's yours; it doesn't change between sessions.
Device fingerprinting
Only your enrolled device can open your tunnel; new devices must re-verify.
Session isolation
Each tunnel runs in its own secure lane; sessions don't bleed across links.
Edge access control
Add invite-only checks with Quickpass, without changing your app.
Least-privilege onboarding
One-time, minimal setup to enroll a device; day-to-day use requires no secrets.