Awacino gives a device a real address inside another network (its SituIP). For that, each platform needs one small network component, and nothing more.

Windows

• “Awacino SituIP service” is part of the app package. Windows installs it together with the app and removes it, with its files, when the app is uninstalled. The app never installs a second copy.
• It runs as LocalSystem, because creating a virtual network adapter and its routes requires system rights. It only listens on a local named pipe for the Awacino app on this PC: it opens no network port, creates no firewall rules and downloads nothing.
• When the user turns on a SituIP, it creates a Wintun virtual network adapter (its signed driver ships with the package) and sets the address and routes for that adapter only.
• Normally no administrator prompt is needed. Only if the service does not answer does the app ask once per session for permission to start its helper with administrator rights.

Mac

• A network extension inside the app. Awacino uses a packet tunnel network extension that ships inside the app bundle. It is not a system or kernel extension, and there is no privileged helper or launch daemon.
• One approval. macOS asks once whether Awacino may add a VPN configuration. No administrator password is needed.
• Sandboxed. The app, its extension and the small helper for Beam in run in the App Sandbox. The helper only runs while the app is open and sharing.
• Removal. Deleting the app removes the app, its extension and the helper. The VPN entry can be removed in System Settings › VPN.

Linux

• One snap, two parts. The snap “awacino” (strict confinement) contains the desktop app and a small system service. Only the service may configure the network (snap interface network-control); the desktop app never does.
• How it works. The app asks the service over a local socket; the service creates the tunnel interface and sets its address and routes.
• One-time permission. Until the Snap Store connects it automatically, run once: sudo snap connect awacino:network-control.
• Removal. sudo snap remove awacino removes the app, the service and its interface.
• The unattended client for servers and Raspberry Pi is a separate installation: Setup unattended access.

iPhone and iPad

• One network extension inside the app. Awacino uses a packet tunnel network extension that ships with the app; Beam in runs inside the same extension. Nothing else is installed: no profile, no helper app, no device management.
• One approval. iOS asks once whether Awacino may add a VPN configuration. Camera or photo access is only requested when you scan a code or pick a file.
• Background. The only background mode is silent notifications, used when one of your own devices asks for a Beam in.
• Removal. Deleting the app removes the app, its extension and its VPN configuration.

Android

• Android’s own VPN service. The tunnel uses Android’s VpnService. Android asks once for the connection request and shows the key icon while connected.
• Visible while running. The connection and Beam in run as foreground services only while they are active, each with a visible notification.
• Permissions. Internet and network state, foreground services, notifications for those services, and an exception from battery optimisation so a running connection is not stopped. No advertising ID, and the app never turns on Always-on VPN.
• Removal. Uninstalling removes the app, its services and its VPN profile.

Network ports on every platform

While the app is idle, nothing listens except local loopback connections between the app and its own service, and for the browser sign-in. Connections between devices are started outbound, so no inbound port forwarding or router change is needed. Only while you actively use Agentic Beam or share a port or screen in your local network does the app listen in that network, and it stops when you stop the feature. No firewall rules are created and no code is downloaded at runtime.

Connections are direct between the user's devices and encrypted end to end; they do not run through our servers.

More: Privacy policy · Support · Security