Built for BAS & Trades Contractors

Remote access that
actually works on-site

Secure tunnel access to any BAS, PLC, or camera system behind a firewall. Port 443 only. WebSockets native. Your brand, your domain.

Start free trial → See how it works
bypass-client.exe — 1150morrison
# bypass-client.exe — running as Windows service

2025/03/11 08:14:22 INFO  BypassHQ Client v1.0.0
2025/03/11 08:14:22 INFO  Connecting to bypasshq.com:443 (TLS)
2025/03/11 08:14:22 INFO  Registered 2 tunnels for site 1150morrison

2025/03/11 08:14:23 LIVE  1150morrison.dhcautomation.ca → 192.168.1.100:8080
2025/03/11 08:14:23 LIVE  1150morrison-nvr.dhcautomation.ca → 192.168.1.50:9000

2025/03/11 08:19:05 CONN  New browser session — piping WebSocket traffic
2025/03/11 08:19:05 OK   Mango live data stream active

Works with your existing stack

Mango M2M v3/v4 SlateBAS Tridium Niagara ASI Controls Axis / Milestone NVR Any HTTP/WebSocket app

// how it works

Up in under
ten minutes.

No firewall rules. No VPN. No port forwarding. Just a single .exe on the site machine.

01 —
🏢

Add your site

Log into the portal, give the site a name, set the local IP and port of your BAS or controller. Choose a subdomain — or use your own domain.

02 —
⬇️

Download the client

Portal generates a pre-configured bypass-client.exe with your token baked in. Copy it to the site PC — one file, no dependencies.

03 —
⚙️

Install as a service

Run the installer — it registers as a Windows service and starts automatically on boot. Done. The site shows Online in your portal.

04 —
🌐

Access from anywhere

Open a browser, navigate to your subdomain. Full HTTPS, WebSockets working, live BAS data streaming — through any corporate firewall on port 443.

// features

Everything a contractor
actually needs.

No bloat. No cloud lock-in. Built specifically for BAS and trades workflows.

🔒

Port 443 only

All traffic over HTTPS. Works through corporate firewalls, hotel WiFi, cellular — anywhere outbound 443 is allowed.

Native WebSocket support

Raw TCP tunneling — not an HTTP proxy. Mango live data, alarm subscriptions, and dashboard updates work without any hacks.

🏷️

Your domain, your brand

Pro accounts use their own domain. krp.dhcautomation.ca stays krp.dhcautomation.ca. Clients never see BypassHQ.

📦

Single .exe client

No .NET runtime. No installer prerequisites. One file, copies over RDP or USB, runs on Windows 10/11 and Windows Server.

🔀

Multiple tunnels per site

One client exposes your BAS controller, camera NVR, and PLC simultaneously. Different subdomains, one connection.

🌐

Portal dashboard

See all sites, online/offline status, last-seen timestamps. Generate new tokens, download updated installers, manage teams.

🔄

Auto-reconnect

Client reconnects silently on network drops with exponential backoff. Site comes back online automatically — no site visits required.

🏗️

Self-hosted option

Run BypassHQ on your own VPS. Docker Compose deployment, HAProxy + Caddy included. Full control over your infrastructure.

🔗

SlateBAS integration

Native integration with SlateBAS — tunnel status visible directly in your BAS dashboard. Coming Q3 2026.

// pricing

Simple, contractor-friendly
pricing.

Pay per site. No per-user fees. No data caps.

Starter

$15/site/mo

Perfect for small shops getting started.

  • Shared bypasshq.com domain
  • Up to 3 tunnels per site
  • Portal dashboard
  • Windows .exe client
  • Auto-reconnect
  • Email support
Get started free →

Self-Hosted

Free

Run it yourself on your own VPS.

  • Full Docker Compose stack
  • HAProxy + Caddy included
  • Unlimited sites and tunnels
  • Your infrastructure, your data
  • Community support
  • GitHub: DHCautomation/bypasshq
View on GitHub →

// get started

Your sites. Online.
In ten minutes.

No credit card required for the free trial. Cancel any time.

Open the portal →