Personal
Your own private mesh, free forever.
$0
FREE FOREVER
- Up to 3 users
- Up to 50 devices
- 2 ACL groups
New — the Peerlify API & webhooksRead more One private network
One private network
for everything you run.
Peerlify is a mesh VPN. It links your laptops, servers and cloud instances into one end-to-end encrypted private network — no hardware, no port forwarding. People sign in with your identity provider, and access rules decide which devices each of them can reach.
$curl -fsSL https://pkgs.peerlify.net/install.sh | sh
Windows and macOS installers on the downloads page.
Platform
Built for the way teams ship.
A mesh VPN for servers, workstations and laptops on Windows, macOS and Linux, managed from one console.
Sign in with your identity
People sign in with GitHub, Google, Microsoft, Apple or your own OpenID Connect provider. Servers enroll with single-use or reusable auth keys.
$ peerlify login
Keys stay on the device
Each device creates its own key pairs. Only public keys reach the control plane, and traffic is encrypted end to end with AES-256-GCM.
$ end-to-end encrypted
Direct, then relayed
Devices look for a direct UDP path through NAT and use it when one works. Otherwise a relay forwards the encrypted packets.
$ peerlify list peers -s
Policy as a JSON document
Rules by user, group, role and tag, down to protocol and port. Embedded tests run before every save; every version can be restored.
$ peerlify acls --query
Audit trail
Administrative changes land in the audit log. Business and Enterprise plans add connection activity logs, kept for 90 days.
$ console → logs
A CLI for operators
Drive the client from your shell: status, peers, ping, telemetry and exit points, with JSON output for scripts.
$ peerlify telemetry --json
Developer experience
Networks as code.
Not as a ticket.
Access policy is a single JSON document. Embedded tests run before every save, every saved version is kept, and you can compare and restore any of them.
policy.jsonv117
{
"rules": [
{
"name": "engineering-to-staging",
"source": ["tag:eng"],
"destination": ["tag:staging"],
"ports": ["*"],
"protocol": ["tcp"],
"action": "accept"
},
{
"name": "engineering-prod-narrow",
"source": ["tag:eng"],
"destination": ["tag:prod"],
"ports": ["22", "5432"],
"protocol": ["tcp"],
"action": "accept"
},
{
"name": "guests-deny-all",
"source": ["tag:guest"],
"destination": ["*"],
"action": "drop"
}
]
}Pricing for any team size.
14-day free trial on every paid plan · annual billing saves 2 months.
Personal+
Solo operators and small side projects.
$12.50/ month
$150/yr · BILLED ANNUALLY
- Up to 6 users
- Up to 50 devices
- 5 ACL groups
Team
Small teams sharing a private network.
$5per user / mo
$60/user/yr · BILLED ANNUALLY
- Unlimited users
- 150 + 15/user devices
- 20 ACL groups
Business
Growing organizations with operational needs.
$13.33per user / mo
$160/user/yr · BILLED ANNUALLY
- Unlimited users
- 200 + 20/user devices
- 500 ACL groups
Enterprise
Custom controls and procurement.
Custom
BASED ON USE CASE
- Custom users + devices
- Unlimited ACL groups
- SSO + SCIM provisioning
Bring your team's network on to a single, observable plane.
Connect your first device in minutes. Sign in with the identity provider you already use.