TYO Reach documentation

TYO Reach is a secure access agent that runs in your system tray. For individuals it routes your chosen browser so blocked or region-locked content opens up. For organisations it creates secure tunnels to office systems — RDP, SSH, databases — and lets a machine inside the LAN act as a relay for the whole team.

Pick a topic from the sidebar, or start with Getting started.

Popular topics

• Getting started — create an account, install the app, switch it on.
• Opening region-locked content — streaming, stores, news — reach what's blocked in your browser.
• FAQ — quick answers: what Reach is, TCP tunnelling, agent mode, plans.
• How Reach differs from a VPN — browser proxy vs TCP tunnels vs full VPN.
• Choosing a browser — which browsers work and how routing is scoped.
• Managing your data — allowances, resets, and what happens at the limit.
• User types — consumer (metered) vs corporate (per-seat, no data cap).
• Troubleshooting — fixes for the most common issues.

For Business

• Set up your team — create a group and invite members.
• SSO & MFA — Google/Microsoft sign-in and requiring MFA for your group.
• IP allowlisting & cloud firewall — your gateway IP, group IP rules, and GCP/AWS/Azure/Cloudflare firewall sync.
• Group policy & TCP forwards — push routing policy, TCP forwards for RDP and SSH, and agent mode for remote LAN access.
• Managed Windows devices — installing and signing in on locked-down corporate machines running endpoint protection software.