Zero Trust VPN

Clientless access for remote workers.

Browser-based VPN with zero trust principles. No client software needed. Identity-verified, encrypted tunnel for any application.

Enable ZT-VPN View docs
🌐 BrowserNo client🔐 WireGuardEncrypted🏢 InternalApp

None needed

Client

Per-session

Auth

Passkey

MFA

WireGuard

Protocol

VPN, reimagined.

Clientless. Passkey auth. WireGuard tunnels.

Clientless access

Browser-based access. No software install.

Per-session auth

Re-authenticate for each session.

Passkey MFA

FIDO2 passkeys and WebAuthn.

WireGuard tunnels

High-performance WireGuard® encryption.

Split tunneling

Route only corporate traffic through tunnel.

Session recording

Record sessions for compliance.

Getting started

Launch your first instance in three steps. CLI, console, or API — your choice.

Terminal
ur security zt-vpn create prod-gw \
  --protocol=wireguard \
  --auth=passkey,totp

ZT-VPN patterns.

Remote access and BYOD.

Remote access

Secure remote access without VPN client.

View tutorial

Suggested configuration

Clientless · Passkey · WireGuard

Estimate your costs

Create detailed configurations to see exactly how much your architecture will cost. Pay for what you use, down to the second.

Configuration 1

Estimated: $112.00/mo

Zero Trust VPN

Processing Volume

GB/mo

Add-ons

Compliance ReportsSOC 2, HIPAA, PCI-DSS reporting
Config 1 cost$112.00

Cost details

$112.00

Modern VPN replacement with identity-based access.

Configuration 1
$112.00
50 Protected Resource(s)$100.00
Event Processing$10.00
30-day Log Retention$2.00
Share

Works seamlessly with

IAM
MFA
ZTNA
Audit
Firewall
SIEM

Frequently asked questions

VPN, reimagined.

Clientless. Passkey auth. WireGuard tunnels.

Enable ZT-VPN View docs