The right client, the right machine
Create client records, classify physical PCs and VMs, then find a machine through search, filters or status without maintaining a separate spreadsheet.
Closed pilotPro accounts enabled individually
200 / pageserver-side fleet search and pagination
EncryptedWebRTC DTLS-SRTP and DTLS DataChannel
0 inbound portsdirect path or relay depending on the network
Less friction before remote control
The goal is not to clone every feature of a mature RMM. Lume Pro starts with what Lume already does: display and control a PC through a video chain designed to stay responsive, then build a clear professional workflow around it.
Support that stays responsive
Nyx opens the same WebRTC engine as the personal journey: video, audio and controls, direct when the network allows it and through an encrypted relay when needed.
Support or second screen
Choose the streamed display, use a virtual display and adapt resolution or refresh rate to the job. VMs and virtual displays remain qualified machine by machine.
A real foundation, with visible limits
The server, migration, PWA and Helio 0.1.90 are deployed. Pilot accounts are still enabled manually, and sensitive capabilities stay closed until their field proof or production secret exists.
| Capability | What the pilot supports | Current state |
|---|---|---|
| Pro gate and second verification | Requests the Lume password again before the fleet, with TOTP and recovery codes | Pilot · deployed |
| Client / PC / VM fleet | Search, filters, pagination and already-paired machine assignment | Pilot · deployed |
| Nyx remote session | Video, audio and controls over direct or relayed WebRTC | Pilot · field proof |
| Second screen | Virtual display, source selection and positioning | Pilot · hardware varies |
| Post-reboot broker | Starts Helio in the console session | VM / non-critical PC only |
| Secure clipboard | Revocable text-only code is ready; grant secret is not enabled | Closed |
| Pre-login access | Authenticating Windows Credential Provider | Unavailable |
| File transfer | Send or retrieve files | Unavailable |
A Pro label does not unlock every capability
Each sensitive permission is separate and must fail closed. The Pro role opens the pilot journey; it does not turn a LogonUI prototype or a clipboard without its secret into a shipped feature.
From search to support in four steps
- Unlock the Pro gateThe professional confirms their identity again before viewing machines. The gate token is short-lived and never written to disk.
- Find the machineClient or machine search, PC/VM filters and server-side pagination avoid loading an entire fleet into the browser.
- Check the contextMachine status, host type and available path are shown before the session opens.
- Support, then stopNyx opens the authorized session. At the end, controls and session tokens must be cut; capabilities that were not granted remain unavailable.
Encryption is the starting point, not the finish line
WebRTC media uses DTLS-SRTP and controls use a DTLS DataChannel. Even when a relay carries the session, it does not receive the content in clear text. The pilot still needs to prove the professional workflows around that tunnel.
- A Lume account and a separate Pro gate are required before the fleet is shown.
- Short session tickets and device or session revocation.
- No Windows, Steam or client password stored by Lume.
- Permissions separated by capability; clipboard remains OFF today.
- Redacted technical diagnostics: no video, audio or keystrokes recorded.
- Unattended pre-LogonUI access stays closed until the signed provider is audited.
See what is verified and what remains open
Our Security page separates encryption, active protections and the work that still prevents a broader launch.
Compatible when Windows exposes a real surface
A VM marked online does not guarantee a capturable image or an audio output. Lume qualifies the actual surface, encoder and Windows session before claiming compatibility.
| Environment | Target path | Honest position |
|---|---|---|
| GPU or vGPU VM | WGC/DXGI and AMF, NVENC or QSV | Best candidate · qualification needed |
| GPU-less VM | Windows capture and software OpenH264 | Experimental · CPU cost |
| Hyper-V / VMConnect | Capturable surface or Lume virtual display after pixel proof | Pilot test required |
| RDP session | The visible session may differ from the captured console | Not guaranteed |
| Headless VM without audio | A render endpoint is required for Windows loopback | Not guaranteed |
Where Lume Pro can become better
A few clients, no heavy platform
A clear fleet and a quick connection for technicians who do not want to open ports or rebuild their machine list for every intervention.
Responsiveness as an advantage
For visual support, training or graphics-heavy applications, Lume targets a more direct feel than tools designed first for 30 fps administration.
Not a complete RMM yet
Software deployment, deep hardware inventory, mass policies, files and LogonUI are not promised today. The pilot exists to prioritize those building blocks.
Build the pilot around real needs
We are looking for demanding professionals
A suitable pilot manages a few Windows PCs or VMs, agrees to start on a non-critical machine and can document video, audio, keyboard/mouse, recovery, second-screen and security behavior. No price or SLA is announced during qualification.
Describe your fleet and workflow
Include your activity, machine count, any hypervisors and the two or three actions that waste the most time today.