Secure Network Access
Secure network-level access powered by WireGuard, built into the gateway. Policy-driven access controls enforce who can connect, from which platforms, and to which networks. Native client support for desktop and mobile with automatic peer expiration and dynamic policy re-evaluation.
Network Access
Secure Network Access
WireGuard-powered network access with native client support on all platforms
Per-user encrypted tunnels with individual key management
Network access policies — allow or deny connections by user, team, IP, and platform
CIDR-based route restrictions — control which networks peers can reach
Dynamic policy re-evaluation — peer access updated instantly when policies change
Split tunneling with policy enforcement — exit node routing controlled by policy
Per-user peer limits enforced by plan and policy (most restrictive wins)
Custom DNS configuration per tunnel for internal name resolution
CGNAT IP allocation — no conflicts with existing network ranges
Full audit trail — policy denials, peer revocations, and restriction changes logged
Automatic peer expiration with policy-driven session duration limits
One-click config download for WireGuard native clients
Network Access Architecture
WireGuard Tunnel Flow
Getting Started
How It Works
1. Connect Identity Provider
Integrate with Okta, Azure AD, Google Workspace, or any SAML/OIDC provider in minutes.
2. Add Resources
Register your servers, databases, and web apps. Define role-based access policies.
3. Secure Access
Users access resources through the browser with identity verification, session recording, and audit logs.
Ready for Secure Network Access?
Deploy in minutes. No legacy VPN required. No credit card required.