Everything your network needs
A full administrative layer over your private network -- not just connectivity, but the controls, visibility, and identity integration a real team needs.
Device management
See every device's name, IP, tags, and online status at a glance. Rename, revoke, or remove any device, and approve or reject the subnet routes it advertises.
Visual policy editor
Start from a Full Mesh or Hub-and-Spoke template, manage tags and groups visually, preview a plain-language diff before applying, and roll back to any prior version.
Enrollment & API keys
Create reusable or single-use enrollment keys with QR-code sharing, plus separate API keys and OAuth clients for your own automation and integrations.
Team & roles
Invite teammates by email with an Owner/Admin/Member role from the start. Removing someone revokes their sessions immediately, not just future logins.
Bring your own identity provider
Configure your organization's own OIDC issuer, client credentials, and allowed domains or groups -- your team signs in the way it already does everywhere else.
White-label branding
Upload your own logo and accent colors, and point a custom domain at your portal so your team sees your brand.
Audit log
Every sensitive action -- device changes, policy edits, membership changes, SSO config -- is recorded with who, what, and when, filterable and searchable.
Alerts & notifications
Configurable device-offline thresholds per organization, with in-app and email notifications for the events that actually need attention.
Self-serve billing
Upgrade plans, manage your payment method, and download invoices -- all through a secure, Stripe-hosted flow.
Gradual feature rollout
New capabilities can be enabled for specific organizations before a full release, so nothing reaches every customer at once untested.