canturan.dev
The signalling server behind a remote support system that only takes control with the user’s consent
- Sector
- Personal brand
- Country
- Türkiye
- Category
- Custom software
- Services
- Custom software
- Technology
- Node.js, Express, Socket.IO, WebRTC, Multer, Docker

01 /
The brief
In businesses with several branches, the IT team either walks to the desk for every support request or depends on paid remote desktop licences. We built our own remote management system for this, and this project is the signalling server at its centre. Windows clients register with a secret key, the administrator sees online machines with their department and branch, and can start a viewing or control session. The video never passes through the server: it only introduces the two ends, and the stream runs directly over WebRTC. The admin app and the client are separate projects, so the screens here were prepared from the real output of a local session with four fictional clients.
Screens
A closer look
Fresh screenshots from the live site: the full page, inner pages and how it looks on a phone.

Sections and inner pages




02 /
Approach
Three decisions that shaped the project.
Control only with consent
Viewing and control are separate modes. A control request opens a confirmation dialog on the client; nothing starts until the user accepts, and only then does screen sharing open in control mode.
Protection in layers
Admin login has per-IP attempt limits and timing-safe password comparison, and a successful login returns a 24-hour session token instead of reusing the password. Connections, messages and screenshots have their own rate limits, backed by strict security headers.
Clients that update themselves
The administrator uploads a new client version to a password-protected endpoint; clients check the version and download the new package. The server itself starts with one command from a small Docker image.
03 /
What we delivered
- Client registration with a secret key and a live client list
- Device view with department, branch and operating system
- Signalling for WebRTC viewing and control sessions, with STUN/TURN configuration
- Remote control only after the user approves
- Instant messages to clients and a preview of their latest screenshot
- Versioned automatic update distribution
Tech stack
- Node.js
- Express
- Socket.IO
- WebRTC
- Multer
- Docker
Services
The code and the domain belong entirely to our client.
Next project
A—58
canturan.dev
Backup, WordPress management and migration tools for the Coolify installs on our own servers
Personal brand · Türkiye
