Orchestrate WireGuard, AmneziaWG, OpenVPN and IPSec across every site from a single control plane — with CrowdSec + Suricata threat detection, multi-hop overlay routing and browser-based access. No cloud. No accounts. No telemetry.
Agents hold a persistent encrypted link to the gateway and route between each other on demand. Watch tunnels come up, fail over and rebalance in real time — no broker in the middle.
The Gateway pushes configuration down an encrypted TLS WebSocket; lightweight Site Agents enforce it locally and stream metrics back up. No inbound ports, no cloud broker.
/ competitors shown as text labels — third-party marks omitted
In-depth articles on protocols, routing, threat detection, clients and self-hosting.
Self-host the control plane on any Linux box, enroll your first agent with a one-liner, and push your first tunnel before the kettle boils.