Our mission
Make secure connectivity a property of identity. Wherever a person or workload is, whatever network they're on, reaching what they're authorized to reach should be one login — and nothing else should be reachable at all.
How we got here
The project started as an internal tool at a distributed infrastructure team frustrated by the same three tickets every week: VPN resets, bastion access requests, and "is staging down or is it just me?" The first version connected eleven laptops and one rack. It took twenty minutes to set up and the tickets stopped. That ratio — minutes to set up, weeks of toil erased — became the product thesis.
What we believe
- Deny by default. A network you must explicitly open is safer than one you must remember to close.
- Boring is a feature. Networking should disappear into the background of getting work done.
- Open protocols win. We build on AmneziaWG and publish our client behavior; lock-in is not a strategy.
- Small teams, flat network. The same free tier that powers a homelab should scale to an enterprise without a redesign.
By the numbers
organizations with a tailnet
integrations
continents with active nodes (yes, including Antarctic research stations)
inbound ports required
This page is an illustrative demo — figures and story are fictional.