Skip to content
O/THE OPEN ALTERNATIVE
↑↓to navigate↵to selectescto close
Netbird

Netbird

WireGuard-based overlay network and Zero Trust Network Access (ZTNA) platform for secure remote connectivity, replacing traditional VPNs with identity-based access control.

Netbird is an open-source alternative to:

Netbird preview

NetBird is a WireGuard®-based overlay network and Zero Trust Network Access (ZTNA) platform designed to securely connect remote users, hybrid-cloud, and edge infrastructure. It replaces legacy VPNs with an identity-based access control system, providing secure remote access, zero-config deployment, seamless SSO with MFA, dynamic posture checks, and centralized network management.

Key Features

  • Secure Remote Access: Least privilege network access with user and group provisioning from identity providers (Okta, Microsoft, Google, etc.)
  • Zero-Config Deployment: Peer-to-peer WireGuard®-based network that runs on almost any platform in minutes without firewall configurations or open ports
  • Seamless SSO with MFA: Session-based single sign-on and multi-factor authentication using existing identity provider settings
  • Dynamic Posture Checks: Enforce security policies for managed devices, including firewall, antivirus, geo-location, and network location checks
  • Centralized Network Management: Control private networks from a single dashboard with detailed activity logging and integrations
  • AI Agent Network: Distribute AI access without sharing LLM API keys, with per-team cost control and full audit trails
  • Compliance & Security: GDPR, ISO 27001, and DORA compliant with detailed audit logs and security posture checks

Tech / Self-Hosting

NetBird offers both a cloud-hosted solution and a self-hosted open-source version. The self-hosted deployment includes:

  • Open Source Core: Available under the AGPL-3.0 license on GitHub
  • Self-Hosting Documentation: Comprehensive guides for deploying on various platforms including Docker, Kubernetes, and bare metal
  • Scalability: Designed for enterprise-grade deployments with support for distributed teams and hybrid-cloud environments
  • Integrations: Compatible with identity providers (Okta, Microsoft Entra ID, Google Workspace), MDM/EDR solutions, and monitoring tools