What's included
- VPN server on your premises or your cloud account: WireGuard, OpenVPN or IPsec
- A key or certificate per user and device, with MFA
- Access rules per team: each group reaches only what it needs
- Split tunnelling, so only work traffic uses the VPN
- Site-to-site tunnels between offices, data centers and clouds
- Logs, alerts, updates and a simple way to remove a leaver's access the same day
How it works
Text version of this diagram
- Laptop → Your VPN server (encrypted tunnel)
- Phone → Your VPN server (encrypted tunnel)
- Branch office → Your VPN server (site-to-site)
- Your VPN server → Finance apps: finance team only
- Your VPN server → File servers: staff
- Your VPN server → Admin systems: IT only
Who it's for
- Companies with remote and travelling staff
- Teams that want control over their own VPN keys and logs
- Offices that need secure links to each other
What you get
- VPN server built on your hardware or cloud
- Per-user keys or certificates with MFA
- Access rules per team
- Leaver process and update schedule
Questions
Why not a commercial VPN app?
A private VPN keeps your traffic, keys and logs under your control and lets you decide exactly who reaches what.
What happens when someone leaves?
Their key is revoked in minutes, and access stops everywhere.
Will a VPN slow our internet down?
With split tunnelling only work traffic uses the VPN, so everyday browsing is unaffected.