100 devices on an encrypted mesh
in 2 minutes. Quantum-safe.

QuickZTNA is a Zero Trust Network Access platform with post-quantum cryptography on every tunnel. It connects laptops, servers, containers, and mobile devices into a single encrypted private mesh network. Every connection is authenticated against your identity provider, authorized against your access policy, and encrypted with hybrid X25519 + ML-KEM-768 (FIPS 203) key exchange. Free for 100 devices and 3 users, forever.

Both are mesh VPN products built on WireGuard. The core difference is cryptography: QuickZTNA uses hybrid post-quantum key exchange (X25519 + ML-KEM-768) on every tunnel by default, on every plan; Tailscale uses classical X25519 only as of May 2026. QuickZTNA also ships a fuller ZTNA feature set in-product (compliance reports, session recording, DLP, CASB, workforce analytics) where Tailscale focuses on the mesh-VPN primitive. Tailscale has greater client ecosystem maturity; QuickZTNA has post-quantum encryption and broader ZTNA depth.

Yes. The Free plan covers 100 devices and 3 users with no trial timer, no credit card requirement, and no encryption downgrade. Hybrid post-quantum key exchange is enabled on every tunnel on Free, identical to paid plans. The plan never expires; upgrade only when you need more users, unlimited devices, or features like SCIM provisioning, compliance reports, or session recording.

Roughly two minutes per device for an interactive install, or seconds per device for fleet rollouts with pre-authentication keys. The install is one command (curl or PowerShell on desktop, App Store or Play Store on mobile). The client auto-registers with your organization, negotiates a post-quantum tunnel, and joins the mesh. For 100 devices via Ansible, Intune, or cloud-init, end-to-end fleet rollout is typically under 2 minutes.

Yes. The client only requires outbound HTTPS (TCP/443) to *.quickztna.com — no inbound ports, no firewall changes, no port forwarding. Peer-to-peer connections use UDP NAT traversal where possible; when UDP is blocked by symmetric NAT or strict firewalls, traffic transparently falls back to an encrypted TCP-over-HTTPS relay in one of four global regions.

Every major IdP that speaks OIDC or SAML 2.0: Google Workspace, Microsoft Entra (Azure AD), Okta, Authentik, GitHub, plus generic OIDC for any standards-compliant provider. SCIM 2.0 provisioning for proactive user lifecycle is included on Business and Workforce plans. Multiple IdPs can be active simultaneously for organizations that use different identity sources for employees vs contractors.

Yes. We hold a SOC 2 Type II report covering Security, Availability, and Confidentiality trust principles. The report is available under NDA via security@quickztna.com. We also conform to FIPS 203 for ML-KEM-768, offer a GDPR-aligned DPA, and sign HIPAA Business Associate Agreements on the Business plan and above. ISO 27001 certification is in progress with target completion in 2026 Q3.

Yes, on the Workforce plan. The control plane runs as a small set of services on your infrastructure with documented requirements (Docker Compose with PostgreSQL, Valkey, and S3-compatible object storage). Client binaries are unchanged between managed and self-hosted deployments. Air-gapped deployments for regulated industries are supported; contact sales@quickztna.com.