Zero Trust access,
two minutes to deploy.

QuickZTNA is a Zero Trust Network Access platform that connects laptops, servers, and containers into a single encrypted private mesh network. Every connection is authenticated against your identity provider, authorized against ABAC policies + continuous device posture, and encrypted by WireGuard. It adds JIT access with approvals, access-review campaigns, and one-click compliance evidence bundles. Free for up to 5 users, forever — every feature included.

Both are mesh VPN products built on WireGuard, and Tailscale has the more mature client ecosystem. QuickZTNA's depth is in governance and threat control rather than the mesh primitive: JIT access requests with approval and auto-revoke, periodic access-review campaigns, versioned ACLs with one-click rollback, exportable SOC 2 / ISO 27001 / HIPAA evidence bundles, enforced per organization, and remote SSH included on the free tier rather than gated behind an enterprise plan.

Yes. The Free plan covers up to 5 users and up to 100 devices with no trial timer and no credit card requirement — and it includes every feature: WireGuard-encrypted mesh, MagicDNS, ABAC policies, device posture, JIT access, access reviews, compliance reports, SSO, SCIM, and remote shell. The plan never expires; upgrade to Business only when you need more seats — billing is per user, never per device, and never to unlock features.

Roughly two minutes per device for an interactive install, or seconds per device for fleet rollouts with pre-authentication keys. The install is one command (curl on Linux/macOS, PowerShell on Windows). The client auto-registers with your organization and joins the mesh. For 100 devices via Ansible, Intune, or cloud-init, end-to-end fleet rollout is typically under 2 minutes.

Yes. The client only requires outbound HTTPS (TCP/443) to *.quickztna.com — no inbound ports, no firewall changes, no port forwarding. Peer-to-peer connections use UDP NAT traversal where possible; when UDP is blocked by symmetric NAT or strict firewalls, traffic transparently falls back to an encrypted TCP-over-HTTPS relay (DERP) in our two global regions (Bangalore + Frankfurt).

Any IdP that speaks OIDC: Google Workspace, Microsoft Entra (Azure AD), Okta, Authentik, plus generic OIDC for any standards-compliant provider, and direct Google and GitHub sign-in. SCIM 2.0 provisioning for proactive user lifecycle is included on every plan, as is TOTP multi-factor authentication. SAML login is currently disabled pending a security fix — use OIDC with the same providers in the meantime.

Not yet — we hold no certification today, and we won't imply otherwise. We offer a GDPR-aligned DPA and sign HIPAA Business Associate Agreements on the Business plan, and the platform generates SOC 2 / ISO 27001 / HIPAA evidence bundles to support your own audit. Our SOC 2 Type II and ISO 27001 audits are in progress, targeting 2026.

Not today — QuickZTNA is a fully managed cloud service. If self-hosting is a requirement for your organization, contact sales@quickztna.com to discuss your needs and our roadmap.