ConnectaSec Access
Access your internal applications without a VPN, from the browser
ConnectaSec Access lets you publish internal applications securely and give remote access from the browser—no client on the user’s device and no need to open the whole network. A truly free alternative to VPN for up to 50 users, with data hosted in Spain.
- No VPN and no client on the user’s PC
- Access only to authorised applications
- Truly free up to 50 users · above 50, contact us
- End-to-end encryption and SSO (Microsoft 365 / SAML)
How ConnectaSec Access works
Three steps. An admin installs a connector on the company network; the end user only opens a browser.
- Install the connector on your network — One command on a Linux, Windows or Docker host with outbound HTTPS (443). No inbound ports to open.
- Publish your apps and define who gets in — Add each internal web application and create policies by user, group or other criteria. If no allow rule matches, access is denied.
- Users (or vendors) open the browser — They sign in with a panel account (with 2FA), Microsoft 365 / SAML SSO or a one-time email code, and only see the apps they are allowed to use.
No VPN and no client on the user device
- Clientless access on the user’s device: work from the browser.
- Remote access from the browser to the apps you publish, without putting those apps on the public Internet.
- The connector dials out over HTTPS to ConnectaSec; you don’t open inbound firewall ports.
- Each person reaches only what their policies allow.
This is access to internal applications without a VPN, aimed at SMBs and MSPs.
Which applications it supports
- Internal intranets and portals
- Web ERP / CRM and management panels
- Admin consoles, ticketing, internal documentation
- Tools a vendor or auditor needs for a while—without handing them the whole network
If the app opens in a browser on your network, it is a candidate for Access. Non-web resources fit better with ConnectaSec Zero Trust (with a client). See the comparison below.
Security: MFA, SSO, end-to-end encryption, data in Spain
- MFA and SSO authentication: the ConnectaSec panel account uses 2FA (TOTP). You can also use a one-time email code or SSO with Microsoft 365 / SAML per application.
- End-to-end encryption (default): traffic between the browser and the connector on your network is end-to-end encrypted. An optional per-app performance mode (proxy) exists for large transfers or WebSockets, where the service acts as an HTTPS bridge. The admin chooses the mode when publishing each app.
- Per-application access: allow/deny policies per app (user, group, email, domain, IP, country or schedule).
- Apps stay off the public Internet: the target lives on your network; the connector bridges with outbound 443.
- Logging and control: every access is logged; you can revoke a session immediately.
- Data hosted in Spain.
- ConnectaSec holds ISO 27001 certification and is in the process of ENS certification, expected by the end of 2026.
Access or ConnectaSec Zero Trust: which do I need?
| ConnectaSec Access | ConnectaSec Zero Trust | |
|---|---|---|
| How the user connects | Browser (no client on the user) | ConnectaSec client installed on the device |
| What you publish | Internal web applications | Broader Zero Trust access (devices, sites, not web-only) |
| Install on the user | No | Yes (ConnectaSec client) |
| Install in the company | Network connector (outbound 443) | Dedicated ZTNA gateway |
| Authentication | MFA, Microsoft 365 / SAML SSO, email code | Per Zero Trust deployment |
| Web access encryption | End-to-end by default; optional performance mode | Zero Trust model with client |
| Price | Truly free up to 50 users; above 50, contact us | See /precios/ (no ZTNA figures) |
| Typical fit | Vendors, audits, internal web apps | Remote work, device fleets, ongoing resource access |
Pricing: truly free up to 50 users
ConnectaSec Access is truly free up to 50 users: not a demo or a trial—it is the product’s free plan.
Above 50 users: Contact us.
No other tiers on this page. Other ConnectaSec products: Pricing.