The hosted Tactical RMM alternative
Tactical RMM is great software. Self-hosting it is a second job: a Linux box to patch, MeshCentral to keep alive, certs to renew, backups to test, and a public-facing server holding domain-admin reach into every client that you are now responsible for securing.
RFF gives you the same Windows-fleet control - fully hosted. No server to maintain, no upgrade nights, no “is my RMM the thing that gets breached.” Paste a one-liner, machines self-enroll, you deploy. Free for your first 100 endpoints.
Start free → · Nothing to host · Up in minutes
Why self-hosters switch to RFF
- Zero infrastructure. No VPS, no MeshCentral, no reverse proxy, no Let’s Encrypt cron. It’s just there.
- No upgrade roulette. Updates ship server-side. Agents self-update on their next check-in. You don’t babysit a release.
- Security is our problem, not your weekend. Credentials encrypted at rest under a cert-wrapped key ring, hardened auth, per-tenant isolation, full audit log - maintained for you. (We even write about how.)
- Multi-client, properly. Give each client a dedicated, hard-walled tenant - switch between them from one login, pooled licensing - or keep it simple with device groups. No per-client instance juggling either way.
RFF vs self-hosted Tactical RMM
| RFF (hosted) | Tactical RMM (self-hosted) | |
|---|---|---|
| Server to maintain | None | Linux host + MeshCentral + DB + certs |
| Upgrades | Automatic, server-side | You, manually, on your schedule |
| Who secures the RMM | We do | You do |
| Time to first deploy | Minutes | After standing up infrastructure |
| Cost shape | Subscription (100 free) | “Free” software + your server + your hours |
| Remote desktop | Built in (beta) - browser, H.264 | Via MeshCentral (you host it) |
| Monitoring, alerting & auto-remediation | Yes - checks, email/webhook alerts, self-heal, workflows | Yes |
| Remote tools (console / files / registry / live processes) | Yes - browser, no screen takeover | Via MeshCentral |
| End-user self-service catalog | Yes - JAMF-style tray catalog; users install published apps without a ticket, brandable with your logo | No |
| Source-available | No (hosted SaaS) | Yes (open source) |
Where Tactical RMM wins: it’s open source and self-hosted, so you keep total data sovereignty and pay no subscription. If running your own infrastructure is a feature for you, keep it. If the upkeep has become the tax, that’s exactly who RFF is for.
Try it next to your current setup
Keep Tactical RMM running. Drop RFF’s install one-liner on 5 machines you don’t lose sleep over, push a deploy, and see how “no server to maintain” feels. Fifteen minutes, no commitment.
FAQ
Is my data sovereign on a hosted tool? It’s isolated per tenant and encrypted at rest; see the security page. You trade self-hosting for us carrying the ops + security burden.
Do agents auto-update? Yes - they self-swap on their next poll after a release. No manual agent pushes.
What about the MeshCentral remote-desktop piece? RFF now has it built in. Remote Desktop (beta) gives you live, attended control of the signed-in user’s desktop right in the browser - H.264 video, multi-monitor, two-way file transfer and clipboard, Ctrl+Alt+Del - over the same outbound 443 the agent already uses, with no MeshCentral instance to host or keep patched. Nobody signed in? You can drive the Windows logon screen as SYSTEM - on every plan including Free, once an admin opts the tenant in. Every session shows the user a consent prompt and lands in the audit log.
Comparing other tools?
We keep honest, side-by-side breakdowns of RFF against the tools teams usually weigh: