Because it runs on your hardware, not ours. We sell hardware (the CEC KVM line, and CEC's custom builds) and, soon, one service: the Private Line, a managed server of your own. The app, the mesh, and the always-on 1 Mbps relay cost us almost nothing per user, so we don't bill for them.
Same itch, different animal. A VPN answers "how do my machines reach each other?" by building a network: a subnet with IPs, ports, and rules to manage. This mesh answers it with routes: your devices carry capabilities (a screen, a shell, a folder), and the graph connects exactly the pairs you've granted, for exactly as long as a route is live. The Private Line runs that introduction layer on servers of your own: VPN-grade exclusivity, on a mesh that was already private by design. See how the layers fit together →
Streams travel directly between your devices, encrypted end to end; keys live on your machines, not on a server. When a relay has to carry traffic, it passes data it can't decrypt. Even a CEC Support session starts with you approving the technician by name, shows only what you approved, and ends the moment you say so.
Your devices are on your local network, so they keep talking to each other: consoles, terminals, files, all of it. Discovery stays local too: peers on the same LAN find each other over mDNS, no server involved, so you can even claim a new device with the internet down. You lose reach from outside the house, and it comes back the moment the internet does.
It announces itself over mDNS on a claim channel that never leaves your LAN: no IPs to type, no cloud round-trip, and it works before the device even has the right time. It appears in your app's claim sheet, you tap Claim, and it joins your fleet. Claiming over the internet is off by default; if you turn it on for a device, it uses a rotating, hard-to-guess code instead of an open door. The same-room shortcut, explained →
No. The code is MIT-licensed, the introduction servers are settings you can point at your own box, and any hardware you buy keeps working without us. Cancel everything and every device keeps running the app. Your data never lived on our side to begin with.
The software needs a live OS to run on. The CEC KVM line is for the days there isn't one: crashed, frozen, stuck in BIOS, or refusing to boot. A KVM watches the machine's video signal and presses its buttons, so it stays on your graph with its OS gone. Watch it save a machine.
Yes. Each one runs CEC KVM, CEC's open firmware fork, and stands on its own as an out-of-band console. The app is what puts it on the same graph as everything else you own, but no subscription, account, or cloud is ever required to use hardware you bought.
Coming soon: a managed VPS we set up end to end, sold as a subscription. It arrives already named with its own subdomain, like unicorn.panda.cec.direct (TLS handled, renewing itself), plus your own signaling, STUN, and TURN at 1 Gbps with unlimited bandwidth serving your devices and nobody else's. It activates as an AllMyStuff node, claimed into your fleet like any device. $10 a month, cancel anytime, and the free shared venue is always there underneath. See what you get, or get in line.
Whatever wants a box that's always on with a real domain in front of it. Host Pangolin or NetBird behind its cec.direct subdomain, park a site on it, keep files on it, open a shell on it from your phone. It's a node in your fleet, so you reach it like anything else you own. The mesh part (your own venue) just comes pre-wired.
Yes, always. That's the Private Line's free, do-it-yourself twin. AllMyStuff already runs the open-source MyOwnMesh daemon under the hood; put that same daemon on a box you keep online, switch on its signaling / STUN / TURN roles, and point the app's Settings → Networks → Servers at it. Your introductions then run on hardware only you own. We wrote the whole thing down, step by step. Self-host it free →
That's CEC Support, at support.cec.direct. The app is free and asking is free: press Ask for help, approve your technician by name, watch everything, end it anytime. The work itself is priced by the job, or covered by your warranty. It runs on the same AllMyStuff engine underneath, so nothing about the trust model changes.
Still curious? The code answers everything the copy doesn't.