Use cases
Six problems, one network
A remote team, a VPN box, three sites, a cluster, a building full of printers, a private VPC. One agent, rules between groups, every link encrypted end to end.
Free plan · No card · One agent, six scenarios
Six scenarios
Pick the one like yours
Each page: what the usual setup costs, what replaces it, and what you get.
Remote access
A laptop on home broadband reaches only what its group is allowed. The rest stays dark.
Read moreBusiness VPN
Laptops, servers and phones on one encrypted network. No concentrator to rack or patch.
Read moreSite to site
One device per site advertises the subnet behind it. Printers keep their addresses.
Read moreKubernetes
One agent inside the cluster carries the route. CI reaches services and the API by name.
Read moreOn-premises sites
One routing device inside the building. Printers, cameras and controllers are named one by one, not advertised as a subnet.
Read moreAWS and cloud VPCs
One instance carries the route into a private VPC. The agent dials out, so no inbound rule and no public address are needed.
Read moreWhat stays the same
Same rules on all six
The six differ in which devices join, not in how access is decided.
- Deny by defaultA new device reaches nothing. Device requirements are checked every time a device connects, so one that falls short loses access.
- Rules between named groupsOps to backups on port 22, never subnet to subnet. One rule, any kind of device.
- Hosted, with no self-hosted editionNo source to download, no control plane to install. We run it. Traffic goes device to device.
Try it on machines you have
Five free devices: a laptop, two servers and a rule between them. An afternoon tells you if the shape fits.
No card · Routes and internet gateway included