Outbound agent connection
Reach the gateway from behind ordinary NAT or CGNAT without opening an inbound port.
Private reverse tunnel
Publish an approved local web service through a controlled, revocable route.
ASL Tunnel connects an outbound agent to a permanent ASL gateway so authorized users can reach selected local HTTP or WebSocket services without opening an inbound router port.
The problem this solves
Replace fragmented work with one understandable path.
A local service may need temporary remote access even when inbound networking is unavailable. Generic tunnels can create long-lived forgotten exposure. ASL Tunnel gives each route an identity, expiration, visibility mode, credential lifecycle, traffic controls, and audit history.
Developers sharing approved local previewsSmall teams exposing a narrow internal web toolOperators working behind CGNAT or a router they cannot configure
What the product can do
Capability with a purpose.
Named HTTPS routes
Use a stable path-based route for an approved HTTP or WebSocket service.
Private or public visibility
Choose an appropriate viewer boundary for each route rather than one global exposure mode.
Rotation and revocation
Expire, rotate, suspend, or revoke route and agent access.
Traffic controls
Monitor counters, limits, connection status, last seen, and a global kill switch.
Administrative companion
Review and control routes from the protected dashboard and Android admin application.
How a pilot works
Start small. Verify the workflow. Expand with evidence.
Define the service boundary
Choose the local service, allowed viewers, expiration, traffic limit, and responsible owner.
Enroll the device
Create a route and pair the outbound agent without placing long-lived secrets in command history.
Observe and retire
Monitor activity, rotate credentials, disable when unused, and retain the required audit evidence.
Trust is part of the product
Honest boundaries build better software.
ASL Tunnel is intentionally not a general VPN. The current scope is approved HTTP and WebSocket forwarding. High-risk protocols remain deferred until stronger visitor authorization, network restrictions, and abuse controls exist.
Questions buyers ask
What to know before choosing ASL Tunnel.
Does ASL Tunnel require an inbound firewall rule?
No. The agent establishes the connection outbound.
Can it expose SSH or RDP?
Not in the documented current scope. Raw TCP, SSH, RDP, databases, and VPN-like access are deferred.
Can a route expire?
Yes. Expiration, suspension, rotation, revocation, and traffic limits are part of the MVP.
Is there an Android tunnel agent?
The Android app is administrative; it monitors and controls routes rather than publishing an Android-local port.
Can routes be private?
Yes. The product supports private and public route modes.
Capabilities reflect the documented Auto Secure Login platform as of August 4, 2026. Availability and onboarding requirements vary by product and organization.
Talk with Auto Secure Login
See whether this fits your organization.
We will map your current workflow, identify the smallest responsible pilot, and document the controls and acceptance criteria before expansion.