Open-source agent · Free tier available

Zero-trust mesh network.
Your keys. Your infra.

Connect any device across any network with WireGuard. Customer-controlled keys, open-source agent you can audit, under 5 minutes to first tunnel.

Sign up with GitHub · No credit card · Cancel anytime

Built with

WireGuard
Rust
Open-source agent
Customer-controlled keys
No vendor key custody

From install to tunnel in under 5 minutes

No configuration files, no manual key exchange, no firewall rules.

1
Sign up with GitHub One click. Your GitHub account gates access — no new password to manage.
2
Keys generated on your device WireGuard keypair created locally. Private key never leaves your device — not even to us.
3
Node joins your mesh Your device gets a stable overlay IP and a signed identity cert under your own tenant CA.
4
Add more devices Install on any other device, sign in with the same GitHub account. Encrypted P2P tunnel up automatically.

Zero trust, not zero control

Designed for developers who want security without giving up auditability.

🔒
WireGuard end-to-end

Modern cryptography. Data travels peer-to-peer, encrypted, never through our servers.

🔑
Your keys, your CA

Each tenant gets its own Certificate Authority. We sign your node certs; we can't impersonate your nodes.

📖
Open-source agent

The code running on your machines is fully auditable. Reproducible builds, Cosign-signed artifacts.

🌐
Edge channel (*.mesh.dev)

Expose any service in your mesh via a stable subdomain. No public IP, no port forwarding needed.

NAT traversal built-in

STUN + hole punching + relay fallback. Works behind NAT, firewalls, and mobile networks.

🛡️
Default-deny policy

Every connection requires explicit policy approval. No implicit trust between nodes.

Start free, upgrade when you need more

No commitment. Self-serve. Cancel anytime.

F0 Free
$0 / month
For individual developers and small projects.
  • Up to 5 nodes in your mesh
  • 1 subdomain (*.mesh.dev)
  • HTTP/HTTPS tunneling
  • WireGuard P2P encryption
  • Open-source agent
  • Multiple subdomains
  • Raw TCP tunneling
  • DLP (PII/payment card detection)
Get started free

Need a team plan or enterprise features? Contact us — enterprise tier coming later.

Audit what runs on your machines

ankayma/open-client

The mesh agent, CLI, and this app are open source. Rust + Tauri. Reproducible builds. Cosign-signed releases. Read every line that runs on your infrastructure.

View on GitHub →

Download

📱
iOS

App Store — coming soon

🤖
Android

Play Store — coming soon

🍎
macOS

GitHub Releases

🪟
Windows / Linux

GitHub Releases

Start in under 5 minutes

Free forever for personal use. No credit card required.

Download free →