Tailscale Identity-Based Zero Trust Connectivity

Tailscale is a fully remote connectivity company whose legal entities are Tailscale Inc., a Canadian corporation based in Toronto, and Tailscale US Inc. in San Francisco. It positions its identity-based Zero Trust platform as a replacement for legacy VPN, SASE and PAM, and says 50,000 businesses use it.

Built on WireGuard, Tailscale creates an encrypted mesh overlay network, called a tailnet, that links laptops, servers, Kubernetes clusters, CI/CD runners, edge and IoT devices across clouds and on-premises sites without opening inbound ports. Access is granted per user, device and tag through central policies tied to the company identity provider. Products cover business VPN, privileged access to SSH, Kubernetes and databases, infrastructure access without bastion hosts, and Aperture, a gateway that governs how users and AI agents reach LLM providers.

• Business VPN: Provides remote access to private networks, Kubernetes clusters and SaaS apps.
• Mesh networking: Connects devices peer-to-peer over encrypted WireGuard tunnels across any network.
• Access policies: Applies least-privilege rules by user, group, device and tag from the identity provider.
• Privileged access: Grants auditable, time-bound access to SSH, Kubernetes and databases.
• Aperture AI gateway: Centralizes and logs LLM access, usage and spend for users and agents.
• Workload connectivity: Links CI/CD pipelines, edge and IoT devices across multi-cloud and on-premises sites.

A Vietnamese tech company can let engineers reach production databases and Kubernetes clusters without a bastion host or VPN appliance. A manufacturer can securely maintain IoT gateways and PLC-connected PCs at remote plants. An enterprise rolling out AI coding assistants can track model usage and spend through Aperture.

Customer stories on the site cite more than 1,000 hours saved at Corelight, 25x headcount growth without dedicated IT at Cribl and a 90% reduction in internal support requests at Instacart. Peer-to-peer WireGuard connections avoid hairpinning traffic through VPN concentrators. Installation takes minutes across operating systems and clouds. A free plan and per-user pricing lower the entry barrier for small teams.

Engineering teams are replacing hardware VPNs and bastion hosts with identity-based overlay networks as infrastructure spreads across clouds, edge sites and GPU providers, while AI agents add new access paths to govern. Technology companies, factories with remote equipment and distributed teams in Vietnam and Southeast Asia face the same need for simple, secure connectivity.

Legal entities per the terms: Tailscale Inc., a Canadian business corporation in Toronto, and Tailscale US Inc., a Delaware corporation in San Francisco. Fully remote company led by CEO Avery Pennarun. Investors shown include Accel, CRV, Insight, HeavyBit and Uncork. Customers include Instacart, Duolingo, Mistral AI, Revolut, Mercari and Telus.