Skip to content
SPECIFICTION
Get listed

Tailscale

tailscale.com

From $1/mo Free plan Open source WebWindowsmacOSLinuxiOSAndroid
Visit tailscale.com
Spec score 8.7 #1 of 24 in Cloud Network Management Software

What it is

Tailscale is a zero-config VPN for connecting users and devices across a network. It uses WireGuard to form low-latency peer-to-peer connections, which Tailscale says are end-to-end encrypted so it cannot read users’ traffic. Administrators can use access control lists to specify which users may connect to which devices. Supported identity providers handle authentication, and SCIM supports user and group provisioning. Monitoring features include configuration audit logs, network flow logs, webhooks, and log streaming to SIEM partners. Device posture information can be used in connectivity rules. Taildrop transfers files between devices, while node sharing lets users share a node without exposing it to the public internet. The service runs on Android, iOS, Linux, macOS, web, and Windows. Personal is free forever for non-commercial use and supports up to six users; Standard costs $8 per user per month. Premium costs $18 per user per month and includes priority support.

Spec sheet

What it does
Tailscale is an identity-based secure-connectivity platform built on WireGuard that links teams, clouds, CI/CD, IoT, Kubernetes, AI workloads and personal devices.Read 14 Oct 2026 · tailscale.com
Product
Tailscale describes itself as a zero-config VPN that works with almost anything.Read 29 Sep 2026 · tailscale.com
Free plan
YesRead 20 Sep 2026 · tailscale.com
Paid from
8Read 20 Sep 2026 · tailscale.com
Integrations
Official integration documentation covers cloud servers, containers and virtual machines, serverless apps, databases, code environments, firewalls, web servers, NAS devices and MDM.Read 14 Oct 2026 · tailscale.com
Compliance
Tailscale says it has completed SOC 2 Type II certification covering security, availability, and confidentiality.Read 29 Sep 2026 · tailscale.com
Support
Tailscale provides documentation, a support request form, community channels, and plan-dependent support levels; Premium lists priority support.Read 29 Sep 2026 · tailscale.com
Founded
2019Read 28 Sep 2026 · tailscale.com
Company
Tailscale identifies itself as Tailscale Inc.; the company page describes connecting coworkers, company databases, and family members as use cases.Read 29 Sep 2026 · tailscale.com
Access controls
ACLs use users, groups, IPs, CIDRs, hosts and tags in directional default-deny policies to control which identities can connect.Read 14 Oct 2026 · tailscale.com
API-only tailnets
The alpha Tailnets API can create, list and delete up to 10 API-only tailnets per organization; these support tagged devices but no human users.Read 14 Oct 2026 · tailscale.com
Company facts
LinkedIn lists Tailscale as a privately held software-development company founded in 2019, headquartered in Toronto, with 201–500 employees.Read 14 Oct 2026 · linkedin.com
Company legal name
The maker identifies itself as Tailscale Inc.Read 14 Oct 2026 · tailscale.com
Device security
Device posture attributes and integrations such as CrowdStrike can be used in connectivity rules to restrict access for devices that do not meet security requirements.Read 29 Sep 2026 · tailscale.com
Documentation depth
The documentation includes technical references for ACL policy syntax, CLI, API, OAuth clients and tsnet plus production, security and integration guides.Read 14 Oct 2026 · tailscale.com
Encryption
Tailscale says its WireGuard-based connections are end-to-end encrypted and that it cannot read users’ traffic.Read 29 Sep 2026 · tailscale.com
File sharing
Taildrop transfers files between devices, while node sharing lets users share a node with another Tailscale user without exposing it to the public internet.Read 29 Sep 2026 · tailscale.com
Funnel
Tailscale Funnel publishes a local service to the public internet through an encrypted HTTPS relay, but is beta, limited to ports 443, 8443 and 10000, and subject to non-configurable bandwidth limits.Read 14 Oct 2026 · tailscale.com
GitHub Actions
The Tailscale GitHub Action creates ephemeral tagged nodes so workflows can reach private servers, runners, test databases and monitoring tools.Read 14 Oct 2026 · tailscale.com
Go SDK
The tsnet Go package embeds a Tailscale network in Go programs and can target a custom coordination server.Read 14 Oct 2026 · tailscale.com
Identity
Users can authenticate with supported identity providers, and Tailscale supports user and group provisioning through SCIM.Read 29 Sep 2026 · tailscale.com
Identity integrations
SSO and MFA can use existing providers including Google, Microsoft AD, GitHub, Okta and OneLogin.Read 14 Oct 2026 · tailscale.com
Intended use
The Personal plan is for individuals and is only suitable for non-commercial use; the pricing page gives homelabs and home VPNs as examples.Read 29 Sep 2026 · tailscale.com
Kubernetes
Tailscale supports Kubernetes ingress, egress and API-server access through an operator, sidecar, proxy or subnet-router deployment, and publishes a Docker image.Read 14 Oct 2026 · tailscale.com
Limit: commercial feature gating
Capterra reviewers say features such as Tailnet Lock, device-posture checks and expanded access-control policies require higher-priced tiers.Read 14 Oct 2026 · capterra.com
Limit: documentation and complexity
Some Trustpilot reviewers call the documentation too sparse for newcomers, while Capterra reviewers mention an advanced-feature learning curve and paid-only features.Read 14 Oct 2026 · trustpilot.com
Limit: mobile and UX issues
App-store and Trustpilot complaints include Android login or connection failures, iOS battery drain, VPN-on-demand problems and Windows re-authentication friction.Read 14 Oct 2026 · play.google.com
MagicDNS
MagicDNS automatically registers device names so tailnet members can reach machines by hostname instead of Tailscale IP addresses.Read 14 Oct 2026 · tailscale.com
Mesh networking
The service creates a peer-to-peer encrypted mesh overlay and can fall back to geographically distributed DERP relays when direct connections fail.Read 14 Oct 2026 · tailscale.com
Monitoring
Features include configuration audit logs, network flow logs, webhooks, and log streaming to SIEM integration partners.Read 29 Sep 2026 · tailscale.com
Networking
Tailscale uses WireGuard to establish low-latency peer-to-peer connections.Read 29 Sep 2026 · tailscale.com
Notable limits
The Personal plan includes up to 6 users, 3 ACL groups, and 1,000 minutes per month for ephemeral resources; extra tagged resources cost $1 per month each.Read 29 Sep 2026 · tailscale.com
Notable release
The changelog records Tailscale v1.102.3 on August 19, 2026, including a fix for host-scoped IPv4 destinations and improvements to MagicDNS and Tailnet Lock startup.Read 14 Oct 2026 · tailscale.com
Open-source scope
The core client daemon, CLI, Linux and Android clients, and DERP relay servers are open source, while the hosted coordination server and proprietary-platform GUI wrappers remain closed source.Read 14 Oct 2026 · tailscale.com
Praise: ease and setup
G2 reviewers repeatedly describe setup, documentation, dashboard usability and private server access as easy, while Trustpilot reviewers praise quick installation and little or no port-forwarding.Read 14 Oct 2026 · g2.com
Praise: reliability and value
Independent reviewers describe stable performance, reliable home-lab use and a generous free tier.Read 14 Oct 2026 · trustpilot.com
Public API
The Tailscale API is available on every plan, uses expiring access tokens or delegated trust credentials, and automates tailnet administration.Read 14 Oct 2026 · tailscale.com
Rating on Apple App Store
4.4 out of 5 from 739 ratingsRead 14 Oct 2026 · apps.apple.com
Rating on Capterra
4.9 out of 5 from 7 reviewsRead 14 Oct 2026 · capterra.com
Rating on Chrome Web Store
5.0 out of 5 from 152 ratings for the third-party Tailchrome extensionRead 14 Oct 2026 · chromewebstore.google.com
Rating on G2
4.6 out of 5 from 31 reviewsRead 14 Oct 2026 · g2.com
Rating on Gartner Peer Insights
5.0 out of 5 from 1 reviewRead 14 Oct 2026 · gartner.com
Rating on Google Play
4.4 out of 5 from 4.58K reviewsRead 14 Oct 2026 · play.google.com
Rating on Trustpilot
3.9 out of 5 from 25 reviewsRead 14 Oct 2026 · trustpilot.com
Security certification
Tailscale states that it completed a SOC 2 Type II certification covering security, availability and confidentiality.Read 14 Oct 2026 · tailscale.com
Security encryption
WireGuard provides end-to-end encryption; private keys stay on devices and Tailscale says it cannot inspect customer traffic.Read 14 Oct 2026 · tailscale.com
Self-hosting
Users can run the independent Headscale open-source coordination server or self-host DERP relays, but Headscale is community-maintained and outside Tailscale support.Read 14 Oct 2026 · tailscale.com
Services
Tailscale Services gives internal resources stable MagicDNS names and routes requests to available backend hosts with access controls.Read 14 Oct 2026 · tailscale.com
System platforms
Official downloads are provided for macOS, iOS, Windows, Linux and Android; the security FAQ also lists tvOS support.Read 14 Oct 2026 · tailscale.com
System requirements
The iOS app requires iOS 16.6 or later, iPadOS 16.6 or later, visionOS 1.0 or later, and tvOS 17.0 or later.Read 14 Oct 2026 · apps.apple.com
Taildrop
The feature set includes Taildrop for transferring files between tailnet devices.Read 14 Oct 2026 · tailscale.com
Tailscale SSH
Tailscale SSH manages SSH authentication and authorization with tailnet policies, automatically generated WireGuard keys and optional session recording.Read 14 Oct 2026 · tailscale.com

Plans and prices

Personal Free free forever up to 6 users · unlimited user devices · 3 ACL groups · 50 tagged resources · 1,000 ephemeral-resource minutes/month Read 14 Oct 2026 · tailscale.com
Standard $8 a month per user, per month unlimited users · 10 ACL groups · SCIM · MDM configuration · device-posture integrations · advanced user roles · 1,000 ephemeral-resource minutes/month Read 14 Oct 2026 · tailscale.com
Premium $18 a month per user, per month 300 ACL groups · 10,000 ephemeral-resource minutes/month · just-in-time access · advanced Tailscale SSH · network-flow logs · log streaming · regional routing Read 14 Oct 2026 · tailscale.com
Additional tagged resources $1 a month per tagged resource adds resources beyond the included 50 Read 14 Oct 2026 · tailscale.com
Add more tagged resources $1 a month Per month for every tagged resource Additional tagged resources Read 29 Sep 2026 · tailscale.com
Mullvad $5 a month Per month for every 5 devices 5 devices Read 29 Sep 2026 · tailscale.com
Mullvad add-on $5 a month for every 5 devices private internet browsing through Mullvad Read 14 Oct 2026 · tailscale.com
Enterprise Priced on request custom pricing custom device quantities and limits · implementation assistance · custom MSA · custom tailnet subdomains · invoice billing Read 14 Oct 2026 · tailscale.com

Every Tailscale plan and price →

Strong points and limits

Strong points

  • WireGuard connections are described as end-to-end encrypted.
  • Access control lists govern user-to-device connections.
  • SCIM supports user and group provisioning.
  • Taildrop transfers files between devices.
  • Available on Android, iOS, Linux, macOS, web, and Windows.

Limits

  • Personal is only suitable for non-commercial use.
  • Personal supports up to six users.
  • Extra tagged resources cost $1 a month each.

Who it suits

The Personal plan is for individuals using Tailscale for non-commercial purposes, such as homelabs or home VPNs. Teams needing device access rules, identity management, or network monitoring may consider the paid plans.

Tailscale in depth

Read the full write-up

Tailscale is a device-networking service built around encrypted peer-to-peer connections. It suits both home users linking their own devices and teams that need identity-based access controls and network visibility. Its strongest case is combining private connectivity with administration; the free Personal plan is strictly non-commercial.

Overview

Tailscale uses WireGuard to connect devices, with low-latency peer-to-peer links and end-to-end encryption; the company says it cannot read traffic carried over those connections. That is a compelling foundation for private networks without requiring administrators to trade away control over who can reach what. Tailscale is delivered as SaaS and supports multicloud deployments.

Key features

Access and identity

Administrators can define device-level connectivity with access control lists, while supported identity providers handle authentication and SCIM provisions users and groups. The 23 identity-provider integrations include Okta, Google, Microsoft Entra ID, GitHub, and Apple ID. This makes Tailscale more suitable for managed teams than a connection-only VPN, though ACL group limits vary by plan.

Monitoring and device security

Configuration audit logs and network flow logs, plus webhooks and SIEM log streaming, give administrators multiple ways to follow changes and network activity. Device posture attributes and integrations such as CrowdStrike can inform connectivity rules, letting teams restrict access from devices that fail their security requirements. SOC 2 Type II certification covers security, availability, and confidentiality.

Sharing and infrastructure

Taildrop transfers files between devices, and node sharing lets a user share a node with another Tailscale user without making it public. Tailscale also supports VPN and firewall policy management, network monitoring, and infrastructure as code. Its cloud-provider coverage includes AWS, Microsoft Azure, Google Cloud Platform, and Oracle Cloud.

Pricing

Personal is free, billed Free forever, and is the right fit for non-commercial homelabs and home VPNs. It allows up to 6 users, unlimited user devices, up to 3 ACL groups, 50 tagged resources to start, and 1,000 minutes per month for ephemeral resources. Extra tagged resources cost $1 a month for each resource. The user cap and non-commercial restriction make it unsuitable as a no-cost business plan.

Standard is $8 a month, billed per user, per month. It removes the user limit, raises the ACL group allowance to 10, and retains 1,000 minutes per month for ephemeral resources. It is the practical step up for teams that need commercial use and more users, but still have modest policy-group needs.

Premium is $18 a month, billed per user, per month. Its allowance rises to 300 ACL groups and 10,000 minutes per month for ephemeral resources, and it adds priority support. Organizations that need higher limits or priority help have a clear reason to pay the premium over Standard.

Enterprise has custom pricing, with custom device quantities and limits, implementation assistance, custom SLAs, and Premium support. It fits organizations that need tailored terms rather than a published per-user tier. A 14-day trial is available. Mullvad is an optional $5 a month for every 5 devices.

Platforms

Tailscale supports Android, iOS, Linux, macOS, Windows, and web. That breadth suits mixed-device networks, while its SaaS deployment and multicloud support also accommodate infrastructure spanning major cloud providers.

Who it's for

Choose Tailscale for a home network that needs private device connections, or for an organization that wants identity, ACLs, posture rules, and monitoring around those connections. It is less suitable when commercial use must fit within a free plan, when a team needs more than 10 ACL groups on the Standard tier, or when its per-user pricing is a poor fit for the intended network.

Pros and cons

Pros: End-to-end encrypted WireGuard connections keep traffic private, according to Tailscale.

Pros: Identity-provider and SCIM support connect network access to user and group administration.

Pros: Logs, SIEM streaming, and posture-based rules give administrators visibility and a way to gate access on device security.

Cons: Personal is limited to non-commercial use and 6 users, so businesses must move to a paid per-user plan.

Cons: Standard permits up to 10 ACL groups; higher group capacity requires Premium at $18 a month per user.

Alternatives

Choose Cloudflare Access if its free plan for under 50 users or its $7 a month Pay-as-you-go plan better suits your user count and budget. Choose ZeroTier if its Personal plan's 10 devices, 1 network, and 1 network admin fit your needs, or if its Essential plan at $18 a month is a better match. F5 BIG-IP APM, BlueCat Horizon, Infoblox Cloud Network Automation, Cilium, Calico Enterprise, and OpenStack Neutron are alternatives to consider.

For broader comparisons, see Cloud Network Management Software and Business VPN Software.

Verdict

Tailscale is a strong choice for home users who can stay within Personal's non-commercial scope and for teams that want encrypted device links governed by identity and device rules. Its main advantage is the combination of connectivity and administration; look elsewhere if the free tier must cover business use or the per-user tiers do not suit your scale.

Verdict

Tailscale combines encrypted device connections with identity, access, and monitoring controls. The free plan has a non-commercial scope and user limit, while paid plans are priced per user.

Where Specifiction places it

Alternatives to TailscaleAll alternatives →