In short
TruGrid SecureRDP is a zero trust remote desktop service. Users authenticate in TruGrid's cloud with built-in MFA, then are brokered to office PCs, RDS and RemoteApp, VDI or Azure Virtual Desktop. A TruGrid Sentry server or SecureConnect on each host connects outbound only, so no inbound firewall ports are needed. It is licensed per user.
Get a quote for TruGrid SecureRDP
Tell us roughly how many users or sites you have and we will reply by email with options and a quote.
What TruGrid SecureRDP is
Remote Desktop Protocol (RDP) is the simplest way to reach an office PC or a Remote Desktop Services (RDS) server, and also one of the most common ways attackers get in: an RDP port published to the internet is scanned and attacked constantly, and a VPN that drops a laptop onto the office network to reach RDP gives far more access than the session needs.
TruGrid's answer is to put its cloud between the user and the machine:
- Cloud authentication first: users sign in to TruGrid, which checks them against your directory and MFA before anything reaches your network; TruGrid lists brute-force protection as a core feature
- No inbound ports: the TruGrid component inside your network only makes outbound connections, so the firewall stays closed to RDP
- Per-desktop access: a user reaches the desktop or app they are entitled to, not the network, which TruGrid describes as zero trust access
- Built for Windows workloads: office PCs, RDS and RemoteApp, VDI, hosted desktop-as-a-service and Azure Virtual Desktop
TruGrid describes SecureRDP as secure access to Windows desktops and apps without VPNs and without firewall exposure.
How SecureRDP works: Sentry, SecureConnect and the apps
If you have searched for "TruGrid connector", this is the part you need. TruGrid uses one of two components inside your network, both outbound-only:
| Component | Where it runs | When to use it |
|---|---|---|
| TruGrid Sentry | A Windows server on the same network as the PCs or RDS hosts | The usual choice: one Sentry brokers sessions to many machines on that network |
| TruGrid SecureConnect | Installed on the hosts themselves | Where Sentry and the hosts cannot share a network, for example hosted or cloud desktops |
A session then runs like this:
- The user opens the TruGrid app for Windows or Mac (TruGrid recommends these over its web connector) or a mobile app, and signs in.
- TruGrid authenticates them against Active Directory, Microsoft Entra ID or a hybrid of both, and applies MFA: TruGrid's own MFA is on by default, and MFA integrated with Microsoft Entra ID is also supported.
- Access is controlled through directory group membership, so the user only sees the desktops or apps their group allows.
- TruGrid brokers the RDP session through its cloud to Sentry or SecureConnect, which already holds an outbound connection.
- The user works on the desktop or RemoteApp; nothing on your firewall has been opened inbound.
Your firewall, web filtering and endpoint protection need to allow TruGrid's outbound traffic and, as TruGrid recommends, exclude its program folders and processes from antivirus or EDR scanning. We check those details during setup.
Not sure which option fits? Ask us
Tell us what you need and we will recommend the right option for your organisation, with a quote.
TruGrid plans compared
| Plan | Designed for | What it adds |
|---|---|---|
| Basic | A single user reaching a small number of computers | Secure remote access, built-in MFA, zero trust access, end-to-end encryption, single sign-on, brute-force protection and the Windows, Mac and mobile apps |
| Business | Teams centralising access, with unlimited computers | Everything in Basic plus agentless brokering, user activity reporting, a branded sign-in portal, Active Directory federation and TruGrid RDS Manager for monitoring RDS hosts |
| Enterprise | Large RDS and VDI estates | Everything in Business plus VDI automation with automated VM pools and image management, on a site licence |
TruGrid publishes the Business plan with a 20-user minimum and unlimited computers, and a free trial is available on Business, so you can test with a pilot group before committing. TruGrid can change what each plan includes, so we confirm the feature set for your subscription when we quote.
When TruGrid is the right answer, and when full ZTNA is
TruGrid does one job: secure remote desktop. That focus is its strength, and also the thing to check before you choose it.
TruGrid is usually the right answer when remote work really means a desktop session: accountants and law firms running line-of-business software on an office server, manufacturers and retailers with fixed PCs, care providers on RDS, or IT teams hosting desktops. It closes exposed RDP, removes the VPN for that use case and answers the cyber insurance question about MFA on remote access, without redesigning the rest of the network.
A broader ZTNA or SSE platform is the better answer when people also need file shares, internal web apps or other services outside a desktop session, or when you want web and SaaS protection for remote users too. Then compare NordLayer, Todyl SASE, Exium SASE or the enterprise options on ZTNA providers. The two approaches are not exclusive: many organisations use an RDP broker for desktops alongside ZTNA for everything else.
For admin access to servers rather than user desktops, privileged access tools or Zero Networks Connect, with MFA in front of admin ports, may suit better. Secure remote desktop access lays out every option side by side, including Duo for RD Gateway.
Is TruGrid SecureRDP the right fit for you?
We will check it against your systems and requirements and recommend the right option.
Closing RDP the NCSC way
The NCSC's ZTNA guidance asks organisations to minimise exposure of applications and warns against maintaining legacy access routes that bypass the policy engine. With TruGrid, that translates into a short checklist:
- move every remote desktop user onto TruGrid before touching the firewall
- close inbound RDP ports and any port forwards to individual PCs
- retire the VPN, or at least remove its route to the desktops TruGrid now serves
- keep MFA on for every user, including administrators and third parties
- review TruGrid's user activity reporting (Business plan and above) as part of your normal logging
That is also a good fit with the firewall control in Cyber Essentials, although certification depends on all your controls, not one product.
Licensing and how we help
SecureRDP is licensed per user, on monthly or annual terms, and each person who opens sessions through TruGrid needs a licence. Prices depend on plan, user numbers and term, so ask us for a quote; the detail is on TruGrid SecureRDP licensing.
How we can help:
- Scope: check what people connect to (office PCs, an RDS farm, hosted or Azure Virtual Desktop) and how they sign in.
- Trial: set up a trial for a pilot group so you can see the sign-in flow and session performance.
- Deploy: install Sentry or SecureConnect, connect your directory, set MFA policy and roll out the user apps.
- Lock down: close inbound RDP ports and retire the VPN for desktop access.
- Run it: we can handle licence changes and renewals on the same account as your other subscriptions.
Timescales depend on the size of the estate and are confirmed at quote. Contact us to arrange a trial.
How Forever Systems helps with ZTNA and SASE
We are an independent IT and cyber security provider. We supply and support several zero trust access and SASE platforms, so we can recommend what fits how your people work rather than one vendor's answer to everything.
- Assess first: we look at your current VPN, firewall, identity set-up and the applications people need to reach before suggesting anything new
- Vendor-aware advice across ZTNA, SSE and SASE options, including Cisco Secure Access and Check Point Harmony SASE
- Pilots and phased roll-out: we can help you start with one group of users or one application, then extend access policy by policy
- VPN replacement: planning the move away from remote access VPNs, including identity provider integration and device posture checks
- Ongoing support: policy changes, licence reviews and renewals, with the details confirmed at quote
We work with businesses, schools, charities and public sector organisations. Pricing depends on users, features and term, so ask us for a quote.
Frequently asked questions
What is TruGrid?
TruGrid is a software company focused on secure access to Windows desktops and apps. Its main product, TruGrid SecureRDP, gives MFA-protected remote desktop access without a VPN or inbound firewall ports. It also makes RDS Manager, included in the SecureRDP Business plan, and a BitLocker management product.
What is the TruGrid connector?
TruGrid's in-network component is TruGrid Sentry, installed on a Windows server on the same network as the PCs or RDS hosts. Where that is not possible, TruGrid SecureConnect is installed on the hosts themselves. Both connect outbound to TruGrid, so no inbound ports are opened.
Is TruGrid a VPN?
No. Users authenticate in TruGrid's cloud and are brokered to a specific desktop or app, rather than being placed on the office network as a VPN would do.
Does TruGrid SecureRDP work with Microsoft Entra ID?
Yes. TruGrid works with on-premises Active Directory, Microsoft Entra ID or a hybrid of both. Its own MFA is on by default, and MFA integrated with Microsoft Entra ID is also supported.
Does TruGrid work with Azure Virtual Desktop?
Yes. TruGrid lists Azure Virtual Desktop alongside office PCs, RDS and RemoteApp, VDI and hosted desktops among the environments SecureRDP secures.
Can we try TruGrid before buying?
Yes. TruGrid offers a free trial on its Business plan, and we can set it up for a pilot group so you can test sign-in and session performance first.
Still have a question about TruGrid SecureRDP?
Ask us and a member of our team will reply by email.
More zero trust access guides
Zero Networks ConnectRemote access with no open ports: MFA before any port opens, only for the authenticated user, under your segmentation policy.VPN replacementRetiring a remote access VPN: the options, an NCSC-aligned migration plan and what changes for users.Secure remote accessSecure remote access by use case: staff, admins, suppliers and personal devices, with the products for each.ZTNA for small businessZero trust access for small and medium-sized firms, with no hardware and per-user or per-device licensing.