Private access to every machine you run
Connect your servers, laptops and sites over an encrypted mesh network, and reach them by SSH from the browser — with no exposed ports, no jump boxes and no shared credentials.
Two products, one control plane
Connect your machines privately, then reach them securely — managed from a single dashboard, with one account and one device inventory.
Mesh. One private network for everything you run.
Devices join an encrypted overlay network and reach each other directly, wherever they are. Connections are outbound-only, so nothing has to be exposed to the internet.
Machines dial out to the coordination service, so there is no port forwarding and no public bastion to defend.
Data centre, office, home or cloud — devices keep a stable identity as they move between networks.
Install on Windows and Linux, or enrol headless servers from the command line.
Shell. SSH from the browser, without handing out keys.
Open a terminal on any connected host straight from the dashboard. Access follows the person, not a shared key file, and every session is recorded.
People sign in as themselves, so access can be granted and revoked per person instead of rotating a shared key.
Every connection is written to an audit trail, so you can answer who reached which host and when.
A browser is the client. There is no agent to roll out to the people who need access.
Suite. Both products, one subscription.
Run the private network and browser SSH together under a single organisation, a single sign-in and a single invoice — for 20% less than buying them separately.
The same account and the same permissions apply across every product in the suite.
Machines are named and grouped once, then shown consistently everywhere they appear.
A single per-seat subscription covers the whole suite, billed monthly or yearly.
Pricing
Choose the plan that works best for you.
Free
- Full console and device inventory
- A single organisation
- Mesh and Shell are not included
Mesh
- 10 nodes per seat included
- $0.50 per additional node
- Windows, Linux and CLI clients
- Device naming and inventory
Shell
- 5 hosts per seat included
- $1 per additional host
- Session history and audit trail
- Privileged access management is Enterprise only
Suite
- Everything in Mesh and Shell
- 10 nodes and 5 hosts per seat included
- One sign-in across every product
- One subscription, one invoice
Enterprise
- Privileged access management for SSH
- Bring your own identity provider (SSO)
- Dedicated or self-hosted deployment
- Negotiated node, host and seat allowances
- Priority support and onboarding
Frequently asked questions
Do you have any questions? We have got you covered.
What is the difference between Mesh and Shell?
Mesh is the private network: it connects your servers, laptops and sites to each other over an encrypted overlay. Shell is browser-based SSH access to those machines, with a full session history. The Suite is both.
Do I have to open ports on my firewall?
No. Devices make outbound connections only, so nothing needs to be exposed to the internet — no port forwarding, no public bastion host.
Do you offer a free trial?
Yes — every paid plan starts with a 7-day free trial. The Free plan lets you explore the console indefinitely, but does not include Mesh or Shell.
How much do I save by paying yearly?
Annual plans are billed at ten months' price, so you get two months free — about 17% off — on every plan.
What happens if I go over my included nodes or hosts?
Nothing breaks. Additional nodes and hosts are billed at the per-unit rate shown on your plan, so you are never blocked from connecting a machine.
Can I use my own identity provider?
Yes. Enterprise plans support single sign-on against your own OIDC identity provider, so accounts and access follow your existing directory.
Can I change or cancel my plan?
Yes. You can switch plans or cancel at any time from the billing page in your dashboard; changes are prorated to your current cycle.
Can I run this on my own infrastructure?
Yes. Enterprise customers can run a dedicated or fully self-hosted deployment, keeping the control plane and all traffic inside their own environment.
Stay up to date
Product updates, security advisories and release notes — occasional, and easy to unsubscribe from.