A system for secure cloud-based management of private cloud connected devices is provided. In one embodiment, the system comprises one or more on-site cloud connected devices located within an untrusted customer site, a multi-tenant cloud-based management service configured to manage the one or more on-site cloud connected devices, and a user interface to facilitate access to the one or more on-site cloud connected devices located within the untrusted customer site by a user associated with the untrusted customer site.