CEDX Remote · Customer Service
Remote support is trust with a keyboard. Remote makes the trust checkable: every session gets an anomaly score, elevated sessions are recorded by policy, approvals have a 15-minute SLA, and standing access is scored like the sessions it enables.
The recordings library has 160 entries and one row marked Missing. Most tools would call that 99% and move on; this one raises the gap as an alert with the session id attached. The missing row is the feature.
Runs on demo data. Devices and principals in the captures are the demo tenant's rows, not customers.
What it is
Attended, unattended and elevated sessions in one list with status, device, agent, duration, anomaly and a recording flag. Session 8f2a ended elevated after 37 minutes with anomaly 68 and REC: No — the exact session the off-hours alert names.
The fleet list shows OS, online state, group, whether it holds a standing grant, and at what privilege — a warehouse node online with root standing, an offline laptop still holding domain admin. Forty-eight agents are stale, 33 of them on critical devices.
The recordings library lists status, duration, size and elevation per recording: live, retained, expiring — and missing. The missing one is 37 minutes on a point-of-sale device, the same session the overview alert describes at 23:14.
Product tour
Not a mockup and not a concept deck. This is what opens at /app/remote.
01 — Overview
Estate health reads 58% — record coverage 90%, devices online 57%, 56 standing grants at high risk, 29 agents on shift. The alerts are specific: a standing grant idle 47 days that keeps domain admin; an off-hours elevated session at 23:14 with no recording; 64MB moved on an elevated database session.
02 — Sessions
Three hundred twenty sessions in the window with the queue visible: 37 active, 36 waiting an average of four minutes. Elevated sessions carry their own count — 160 — and 15 of them are marked unrecorded in the column, not in a footnote.
03 — Devices
One hundred eighty enrolled devices across databases, warehouses, kiosks, tablets and print fleets. Standing grants and privilege levels are columns — so “which machines can be touched without asking” is a filter, not an audit project.
04 — Recordings
One hundred sixty recordings with the elevated-coverage card at 90%. The policy gap — one missing recording — is listed with its session and device, next to 14 expiring recordings and 64K MB of storage.
Who runs it
Roles, not references. We have no named customers yet, so nobody is quoted, credited or claimed as one — and this page ships without photography rather than with a synthetic frame.
Works the waiting queue — 36 sessions, four minutes average wait — and takes the attended ones with the customer watching.
waiting · 36Owns standing access: 56 high-risk grants, and the idle-47-day domain admin first. Approvals past the 15-minute SLA land on this desk too.
standing high risk · 56Chases the 48 stale agents — 33 on critical devices — and the 78 machines not online when they should be.
stale agents · 48The shape of it
Every figure below is legible in the captures above. Nothing here is a projection of your estate — it is the state of the demo data.
How it runs
Unattended or elevated access starts as an approval — 22 pending, 9 already past the 15-minute SLA, counted on the overview.
Sessions run attended, unattended or elevated, each with an anomaly score accumulating as it goes — 7 currently high.
Elevated sessions are taped by policy at 90% coverage, and the single gap is an open alert with the session id attached.
Standing access is scored like the sessions it enables — 56 grants at high risk, idle ones flagged with their privilege named.
One record
A remote session usually starts as a ticket and ends in an audit. The estate keeps both ends — same workspace, same Ask AI button.
“Can you look at my machine?” arrives as a ticket. Desk's queue is where Remote's sessions begin life.
CEDX VaultThe persistent grants Remote scores are the credentials Vault exists to hold — idle-and-privileged is a shared problem.
CEDX AccessApprovals with a 15-minute SLA for elevated sessions are the same discipline Access applies to privileged identity.
CEDX CopilotAsk AI — ⌘J — sits on every Remote screen, versioned and traced by the Copilot console behind it.
Limits
Finding this out on the third call is worse for you than reading it here, and worse for us.
Start
Open it right now
Your fleet, your policies
Remote with the rest of it
Questions
Yes. Every screenshot is a capture of the running build, open at /app/remote. It runs on demo data — the devices and principals are the demo tenant’s rows.
Elevated sessions, by policy — the coverage card reads 90% for ended elevated sessions, and the one policy gap is listed with its session id and device rather than averaged away.
Persistent grants that let a principal reach a device without a per-session approval — 76 across the demo fleet, 56 scored high risk. The overview flags the idle ones: one grant unused for 47 days still holds domain admin.
Unattended and elevated sessions start as requests with a 15-minute SLA. Twenty-two are pending in the demo and nine are already past SLA — the overview counts them rather than hiding the queue.
No certification has been issued. What we can evidence about hosting, encryption and access is on the security page.
Live build, demo data, no card. Then ask which of your machines can be touched without asking.