Business VPN
The concentrator leaves the path
Hub-and-spoke sends every packet through one box. Here devices connect directly, and the session stays encrypted the whole way.
Free plan · No card · No inbound ports
The problem
The design is the bottleneck
One box in the middle sets the latency, the failure domain and the ceiling. A bigger box only moves it.
Traffic hairpins through the hub
Two colleagues on one floor swap packets through a rack in another region.
One direct path
Latency follows the distance between the devices, not the trip to a hub. The agent on each device reports whether its link is direct or relayed.
Connected means trusted
Authenticate once at the hub and you are on the network. After that, only the firewall limits you.
Direct and encrypted
Traffic is encrypted the whole way. Device requirements are checked every time a device connects, not once.
How it works
Three moves, no cutover
You install an agent on machines you already own. Nothing new goes in the rack.
Enrol the fleet
Silent install from your MDM with an enrollment key. Servers and images configure from the environment.
Devices connect directly
Each device dials out and negotiates a direct path. If the network refuses, an encrypted relay carries the session.
Retire the concentrator
Run both paths side by side, one site at a time. Power the box down when nothing needs it.
What you get
Everything the box did, without it
The subnet behind the router
One device at the site advertises the subnet. Printers and legacy hosts keep their addresses.
Read moreRules between named groups
Sales to the CRM on 443. Until a rule says so, a device reaches nothing.
Read moreAccess ends with the account
Block a member in the dashboard and every device they signed in on disconnects at once. Nobody has to reach the laptop.
Read moreTwo machines, no hub in between
Put the agent on a laptop and a server. The link comes up direct.
Free plan · No card · No appliance