Tailscale

Tailscale is an identity-based connectivity platform that creates a private mesh network across users, devices, and services. It is designed to replace legacy VPN, SASE, and privileged access management tools, connecting remote teams, multi-cloud environments, CI/CD pipelines, edge and IoT devices, and AI workloads. The platform uses WireGuard to establish peer-to-peer, end-to-end encrypted connections, with identity and access control enforced at the network level.

Core capabilities include access control lists, device posture management, and user management with SSO, OIDC, and SCIM provisioning. Tailscale provides brokered SSH sessions, configuration and network flow logging, log streaming to SIEM partners, and GitOps workflows for ACLs. It supports subnet routers, exit nodes, split tunneling, MagicDNS, and service sharing, with integrations for identity providers, cloud platforms, Kubernetes, infrastructure as code, endpoint protection, and mobile device management. The platform runs across major operating systems and can be embedded in Go applications via tsnet.

Tailscale is intended for IT, security, DevOps, and engineering teams managing distributed infrastructure, as well as individuals and smaller organizations. It offers a free plan, with additional paid editions for organizations requiring advanced features.