Orchestrate WireGuard, AmneziaWG, OpenVPN and IPSec across every site from a single control plane — with CrowdSec + Suricata threat detection, multi-hop overlay routing and browser-based access. No cloud. No accounts. No telemetry.
Agents hold a persistent encrypted link to the gateway and route between each other on demand. Watch tunnels come up, fail over and rebalance in real time — no broker in the middle.
The Gateway pushes configuration down an encrypted TLS WebSocket; lightweight Site Agents enforce it locally and stream metrics back up. No inbound ports, no cloud broker.
/ competitors shown as text labels — third-party marks omitted
In-depth articles on protocols, routing, threat detection, clients and self-hosting.
Privycs is in private beta. Tell us who you are and why you want in. Approved requests receive the install command by email — nothing is shown here.
Recommended: Debian 12+ / Ubuntu 22.04+. These are the primary, fully-tested platforms for the beta. CentOS Stream, RHEL, Rocky Linux and AlmaLinux install and run, but are not yet considered stable — use them for evaluation only.