Robots, kiosks, gateways, sensors — every device dials out and lands in your private network. Nothing listens on the public internet.
Every device initiates its own connection out to the mesh — through carrier NAT, locked-down LTE, or whatever firewall the site has. There is no inbound port to open, no public IP to rent, and no SIM-VPN contract per thousand devices.
Auth keys are baked into the device image at manufacturing, tagged for their fleet and scoped to exactly what the device needs. When a kiosk walks out the door, its key dies — the rest of the fleet never notices.
Devices behind carrier NAT, CGNAT, or locked-down LTE still connect — they initiate, firewalls stay happy.
Retire the SIM-based VPN plans and per-site tunnels. One identity per device on one mesh.
A device in a factory, a food truck, and a field trailer behave identically — the network doesn't care where they physically sit.
Wifi to LTE to ethernet — the client re-establishes on whatever path appears without a provisioning change.
ACLs match device tags: tag:robot may reach the telemetry service and nothing else.
Keys are per-device and revocable individually. A stolen kiosk is a two-click problem.
Nothing about the fleet is reachable from the internet — scanners see nothing because there is nothing to see.
Every packet carries the device's identity, so telemetry, commands, and OTA updates are attributable end-to-end.
Linux clients run on ARM boards and 20 MB of RAM. If it runs Linux, it joins.
See every device, its last check-in, and its OS version from the console.
Factory imaging includes the auth key; devices join on first boot without a human in the loop.
SSH into a gateway across the world to reconfigure it — no site visit, no jump box, fully audited.
Warehouse fleets phone home to one telemetry endpoint — private, authenticated, revocable.
Thousands of stores, zero inbound ports, centralized payment-backend access.
Modbus/PLC gateways reachable by engineers worldwide without site visits.
Test with ten devices free — scale to ten thousand when ready.