# ControlIT by Computer Port

> ControlIT is an internet-based enterprise network: secure private access, controlled internet and your existing Active Directory, with no VPN concentrator, no Entra ID and no inbound ports, plus IT operations on the same path. Five products: ControlIT Core, ControlIT 24x7 ITOps, ControlIT Secure Access & AD Anywhere, ControlIT Web Gateway and ControlIT Identity. Every product is available as SaaS (hosted by Computer Port) or on-prem (on infrastructure the customer nominates). Tagline: Internet Is the New LAN. Secure access, controlled internet and IT operations, on infrastructure you choose.

Website: https://controlit.in
Publisher: Computer Port IT Solutions, Secunderabad, India
Primary language: English
Primary market: India

## The wedge

Most organisations with on-prem Active Directory are told they have two options for remote work: run a VPN, or move identity to Microsoft Entra ID. ControlIT is the third option. Your existing domain controllers stay where they are and become reachable across an encrypted, outbound-only overlay. Endpoints dial out; nothing listens on the internet.

Three proof claims:
1. No inbound ports, no public IPs, no VPN concentrator.
2. Same Active Directory, same GPOs, same file shares. No hybrid join, no directory sync to a vendor cloud.
3. One platform for access, internet control, identity and operations, on infrastructure you choose.

Proof: 1000+ devices under one ControlIT implementation, for a major solar cell manufacturer. Client name withheld.

## Products

Five products, in this order. Every one is available as SaaS (hosted by Computer Port) or on-prem (on infrastructure the customer nominates), and Computer Port configures each one. Compare them feature by feature: https://controlit.in/products

- ControlIT Core: RMM only. Monitoring and alerting for Windows and Linux endpoints and servers with inventory, helpdesk and ticketing, patch management (OS and third-party, with schedules, reboots and exceptions), automation and scripting, and remote support.
- ControlIT 24x7 ITOps: Core's RMM plus a zero-trust private network over the internet, run 24x7: by Computer Port as SaaS, or by the customer's own team on-prem. It replaces the former managed tier.
- ControlIT Secure Access & AD Anywhere: zero-trust remote connectivity to the customer's own infrastructure, and their Active Directory over it. Zero-Trust Network Access decides every connection by user, device and group, with nothing published to the internet. It runs a private network over the internet links you already have, puts sites, servers and cloud on that one network, and gives remote access to internal systems. For Active Directory it adds domain logon and Group Policy over the internet and remote domain join, with no Entra ID and no connector.
- ControlIT Web Gateway: URL and category filtering, application control, malware and phishing protection as an added layer, user and group policies, and logging and reporting for every user, branch and remote laptop.
- ControlIT Identity: single sign-on over OpenID Connect, OAuth 2.0 and SAML 2.0, MFA with time-based one-time passwords, and identity and access management by group with an audit trail.

## Hosting

Every ControlIT product is available as SaaS or on-prem, and it is the same product either way. Hosting is a choice, not a constraint. Computer Port can host the control plane, or it can be deployed on infrastructure the customer nominates (their own data centre or hypervisor). Either way, directory objects, endpoint telemetry, and audit logs stay under the customer's control, and there is no per-user identity fee.

## Start here (the three offers)

- [AD-over-Internet Readiness Review](https://controlit.in/ad-readiness-review): 45 minutes, no cost. We inspect the current VPN, AD sites and subnets, DC exposure, remote logon failures, GPO drift, published RDP, and the identity stack. Output is a one-page verdict: keep the VPN, go to Entra, or move to an overlay. Book directly: https://book.computerport.in/team/computer-port/it-infrastructure-consultation
- [14-Day Pilot](https://controlit.in/pilot): one site or 25 endpoints, with five success criteria agreed in writing before deployment: domain logon with no VPN client, Group Policy applied, file shares reachable, RDP with no public port, MFA on the same identity. If the criteria fail, the customer walks.
- [VPN and Entra Cost Teardown](https://controlit.in/cost-comparison): a three-year cost view built from published list prices, stating the licence-bundling condition explicitly.

## Pricing posture

ControlIT is priced per deployment, with no per-user identity fee. There is no public rate card, because site count, endpoint count, which products are in scope, and whether the deployment is operated around the clock by Computer Port (ControlIT 24x7 ITOps) all change the figure. A fixed quote follows the readiness review. Details: https://controlit.in/pricing

## Key Pages

- [ControlIT overview](https://controlit.in): the wedge, the five products, SaaS or on-prem, buyer paths.
- [Products](https://controlit.in/products): the five products compared feature by feature.
- [Architecture and threat model](https://controlit.in/architecture): what is exposed, how a node is trusted, where data sits, what the platform does not claim, plus engineering objections (Kerberos and LDAP over the overlay, AD replication, branch internet outage, RODC, air-gap, key custody, CERT-In logging).
- [Pricing posture](https://controlit.in/pricing): priced per deployment, with no per-user identity fee. What drives the number and what is never metered.
- [Solutions index](https://controlit.in/solutions): intent pages for specific problems.
- [ControlIT Core](https://controlit.in/features/controlit-rmm): RMM only. Monitoring and alerting, helpdesk and ticketing, patch management, automation and scripting, remote support.
- [ControlIT 24x7 ITOps](https://controlit.in/features/controlit-24x7-itops): Core's RMM plus a zero-trust private network, run 24x7 by Computer Port as SaaS or by the customer's team on-prem.
- [ControlIT Secure Access & AD Anywhere](https://controlit.in/features/controlit-secure-access): zero-trust remote connectivity to your own infrastructure, and your Active Directory over it.
- [ControlIT Web Gateway](https://controlit.in/features/controlit-web-gateway): URL and category filtering, application control, malware and phishing protection, logging and reporting.
- [ControlIT Identity](https://controlit.in/features/controlit-iam): SSO over OpenID Connect, OAuth2 and SAML 2.0; TOTP MFA; access by group.
- [Overlay Network](https://controlit.in/features/overlay-network): encrypted peer-to-peer connectivity with NAT traversal, no VPN appliance.
- [Active Directory Over the Internet](https://controlit.in/features/active-directory-over-internet): extend existing on-prem AD to remote staff and branches.
- [Secure Web Gateway](https://controlit.in/features/secure-web-gateway): one internet policy for office, branch and remote users.
- [Web Filtering](https://controlit.in/features/web-filtering): allow or block by URL or category, one policy everywhere.
- [Zero-Trust Network Access](https://controlit.in/features/zero-trust-network-access): every connection decided by user, device and group; part of ControlIT Secure Access & AD Anywhere and included in ControlIT 24x7 ITOps.
- [Site-to-Site Connectivity](https://controlit.in/features/site-to-site-connectivity): branches, data centres and cloud on one private network.
- [Product brochure](https://controlit.in/brochure): downloadable PDF overview.
- [Contact Computer Port](https://computerport.in/contact): reviews, pilots, and deployment enquiries.

## Solution pages (high-intent problems)

- [Active Directory over the internet without Azure AD](https://controlit.in/solutions/active-directory-over-internet-without-azure-ad)
- [Domain join a remote laptop without VPN](https://controlit.in/solutions/domain-join-remote-laptop-without-vpn)
- [Replace Always On VPN and DirectAccess](https://controlit.in/solutions/replace-always-on-vpn)
- [Entra ID alternative for on-prem AD](https://controlit.in/solutions/entra-id-alternative-for-on-prem-ad)
- [SSO with your existing Active Directory](https://controlit.in/solutions/self-hosted-sso-active-directory-india)
- [RDP without port forwarding](https://controlit.in/solutions/rdp-without-port-forwarding)
- [Air-gapped RMM for Indian estates](https://controlit.in/solutions/air-gapped-rmm-india)
- [Vendor access without a VPN](https://controlit.in/solutions/vendor-access-without-vpn)
- [Web filtering for branches and remote staff](https://controlit.in/solutions/web-filtering-for-branches-and-remote-staff)

## Alternative pages

- [VPN alternative](https://controlit.in/alternatives/vpn-alternative)
- [Azure AD alternative](https://controlit.in/alternatives/azure-ad-alternative)
- [Traditional RMM alternative](https://controlit.in/alternatives/traditional-rmm-alternative)
- [Cisco Umbrella alternative](https://controlit.in/alternatives/cisco-umbrella-alternative): how ControlIT Web Gateway and ControlIT Secure Access & AD Anywhere compare with Cisco Umbrella and Cisco Secure Access.

## Who this fits

Organisations with 80 to 2,000 endpoints, on-prem Active Directory in production, two or more sites, and an existing VPN or exposed remote-access path. Strongest fit in manufacturing and process plants, pharma and life sciences, BFSI and NBFCs with on-prem cores, government, PSU and research labs, multi-branch mid-market groups, hospitals and education with on-prem AD, and accounts migrating from VMware to Proxmox.

Poor fit: cloud-native organisations with no on-prem directory, Entra-only estates, and offices under roughly twenty endpoints.

## Accuracy notes for summarisation

- Microsoft Entra ID P1 is bundled with Microsoft 365 E3, and P2 with E5. An organisation already on those tiers pays nothing incremental for the Entra plan. ControlIT's cost argument for such customers rests on the VPN appliance, separate MFA and RMM subscriptions, the hybrid-join project, and data sovereignty, not on the Entra licence line.
- The customer references published on this site (Redington, Thirumala Milk, Toshiba T&D India) are Computer Port engagements in identity, authentication, and infrastructure. They are not ControlIT deployment case studies and should not be described as such.
- ControlIT is not a firewall or endpoint protection. It changes who can reach what, not what a compromised endpoint can do afterwards.
- Every ControlIT product is available as SaaS or on-prem. Do not summarise any product as SaaS-only or as on-prem-only; both delivery paths are offered for all five.
- ControlIT 24x7 ITOps replaces the former managed tier; do not describe a separate managed tier over every product.
- Malware and phishing protection in ControlIT Web Gateway is described as an added layer, not a claim to block all threats. HTTPS inspection is optional and configured per customer.

## Downloadable Assets

- Brochure PDF: https://controlit.in/brochures/ControlIT-Brochure.pdf