Zero Trust Platform
vs. Legacy Remote Desktop

Security Model Comparison

*RustDesk relies on numeric device IDs and static access codes, or complex self-hosted rendezvous/relay servers with open inbound ports. Agilicus strictly uses existing single sign-on (Microsoft Entra ID, Okta, Google Workspace) with outbound-only connectors.

The Fundamental Difference

The choice between Agilicus and RustDesk is a choice between a Complete Zero Trust Platform and Self-Hosted Remote Control Software. A choice between browser-native single-resource authorisation and maintaining self-hosted relay servers with open inbound firewall ports.

Seamless Single Sign-On (Okta, Entra, Google Workspace). Single-resource authorisation.

Browser-based VNC and RDP. Full audit trails to your SIEM via Webhook. No shared passwords.

Remote desktop tool requiring installed client software and self-hosted rendezvous/relay servers (hbbs/hbbr) with open inbound ports, or reliance on public relays. Uses device IDs and access passwords.

Agilicus AnyX is a complete Zero Trust Network Access platform comprising authentication, authorisation, audit, and access. A primary capability of AnyX is enabling secure, clientless remote access to graphical environments via Remote Desktop Protocol and VNC Desktop directly inside standard web browsers. Users authenticate through their corporate single sign-on identity providers (Microsoft Entra ID, Okta, Google Workspace) with mandatory multi-factor authentication, enforcing least-privilege authorisation without exposing internal networks or requiring inbound firewall openings.

RustDesk is an open-core remote desktop application that positions itself as an alternative to proprietary tools like TeamViewer and LogMeIn. While RustDesk allows organizations to self-host their rendezvous and relay infrastructure (hbbs and hbbr), running custom servers requires opening multiple inbound firewall ports (TCP 21115 to 21119, UDP 21116) and configuring public IP addresses, significantly expanding the network attack surface. As highlighted in community evaluations across industry and self-hosting forums, relying on public relays introduces governance and transparency concerns, while client binaries frequently trigger endpoint antivirus flags. Agilicus AnyX eliminates these operational burdens through an outbound-only connector architecture that requires zero open inbound ports and zero client software on end-user devices.

Why Modern Teams Choose Agilicus

Compare capabilities side-by-side.

Feature

RustDesk

Client Requirement

What does the user need to install?

Download required

Identity Providers

Can you use Google, Microsoft, Okta natively?

Alternate Auth

Inbound Ports & Exposure

Are inbound firewall ports required?

Multiple Ports Open
TCP 21115-21119, UDP 21116

Access Granularity

Can you apply read-only or GeoIP restrictions?

Binary Access
All or Nothing

Clientless Universal Access

Stop managing support clients. Agilicus AnyX provides remote desktop directly in the browser (desktop, tablet, or mobile phone).

  • Ideal for 3rd-party vendors
  • No MDM or client required
  • Zero friction onboarding

Complete Audit & Compliance

Get full visibility into every session. Easily integrate with your security tools.

  • Audit to SIEM via WebHook
  • Detailed activity logs
  • Strict identity association

Prevent Shared Passwords

Eliminate shadow-IT backdoors and shared credentials that lead to critical breaches.

  • Enforce Single Sign-On
  • Mandate Multi-Factor Auth
  • Revoke access instantly