Features

Aperture by Tailscale
Unified AI governance for AI agents and users.
Bring Tailscale to work
See how Tailscale fits the systems your team already runs.
Bring Tailscale to work
Start with your own devices. Bring the same simplicity to your team.
Partner Opportunities
Partner Opportunities
Tailscale makes it easy to overlay any network topology, enforce the principle of least privilege, and continuously monitor your tailnet.
Accelerate application development through 65+ integrations to accommodate any workflow.
Pre-authentication keys automatically register new nodes without having to sign in via a web browser.
Create access tokens for scoped access to the Tailscale API.
ACL tags assign an identity to a node that’s used as part of an ACL to restrict access.
Tailscale brokered and authenticated SSH connection without managing SSH keys.
Initiate browser-based SSH session from the admin console to a designated node.
Share a folder or service with the public internet over HTTPS.
Create a system of record to monitor performance, user-to-node interactions, and potential security incidents.
Surface what configuration-based actions occurred, by whom, and when.
Natively stream configuration or network flow logs to our SIEM integration partners.
Surface what node-to-node interaction occurred, and when.
Store any Tailscale SSH session recording long-term in any S3-compatible service or local disk.
Create event triggers that notify you in real-time via partner integrations.
Identity is weaved directly into the network fabric to safeguard valuable resources with Access Control Lists (ACLs) enforceable at the node level.
Verify ACLs coverage provides sufficient coverage against unnecessary exposure.
Create RBAC policies to determine which users, roles, or groups can access, which nodes on your tailnet.
Manage ACLs version control within a CI/CD workflow using GitHub or GitLab.
Partner integrations allow administrators to provide time-bound, elevated privileges for users.
Administrative roles with varying privileges to manage your tailnet.
Tailor Tailscale for the needs of your business with UI customization, auto-updates, runtime configurations and more, all integrated with your favorite Mobile Device Management solution.
Configure and deploy Tailscale using MDM solutions
Customize Tailscale using system policies
Securely connect users, devices, and services across any infrastructure without interruptions.
Tailscale uses WireGuard VPN protocol for end-to-end encryption.
Route all traffic through a designated egress point, similar to a privacy VPN.
Ensure users can still access resources if a routing device becomes unavailable.
Route traffic to overlapping IPv4 subnets without renumbering with 4via6 subnet routers, by assigning unique IPv6 addresses for each subnet.
Tailscale uses WireGuard VPN protocol to establish low-latency, peer-to-peer connections.
Ensure users can still access resources if a routing device becomes unavailable.
MagicDNS automatically registers DNS names as human-readable for better discoverability.
Split tunneling only routes internal traffic through the VPN for improved latency.