AI Deck

Tailscale — A WireGuard-based zero-trust VPN that securely connects teams, clouds, and AI workloads by identity

Tailscale Inc. (Canada) offers a zero-trust network platform built on WireGuard. Unlike a traditional VPN, where connecting to a gateway often grants broad freedom inside the network, Tailscale decides “who can reach which resource” through policy, starting from device and user identity. Install the app, sign in, and your home PC, office servers, VMs across multiple clouds, CI/CD runners, IoT devices, and AI workloads all appear on the same virtual network (a tailnet). Since its general release in April 2020, the company reports adoption by more than 20,000 organizations, and it has recently added Aperture, which centralizes governance of AI agent and LLM usage.

Key Features

  • Mesh connectivity over WireGuard: Devices communicate directly (peer to peer) with encryption instead of routing through a central VPN server. When a direct path is not possible, traffic automatically falls back to relay servers (DERP), so you rarely have to think about NAT or firewall configuration
  • Identity-based access control (ACLs): Integrates with identity providers such as Google Workspace and Microsoft Entra ID, letting you express rules like “users in this group may reach port 22 on servers with this tag” in a policy file. Permissions follow identity, not network location
  • MagicDNS and Tailscale SSH: Resolve devices by name and stop managing IP addresses. Tailscale SSH replaces distributing and revoking SSH keys with identity-based authorization
  • Subnet routers and exit nodes: Devices that cannot run Tailscale — printers, legacy equipment, an entire on-premises subnet — can join the tailnet through a single router node. Designating an exit node lets you route all traffic out through a specific location
  • Multicloud, CI/CD, and IoT support: Ephemeral nodes and OAuth clients handle short-lived connections, such as a CI/CD job that joins the network only while it runs
  • Aperture (AI governance): Consolidates how AI agents and users reach LLMs and MCP servers behind a single proxy. It aggregates tools from multiple remote MCP servers into one endpoint and controls per-tool access using the same Tailscale identity and grants system, deny-by-default. It also supports dynamic server registration and auto-detects Streamable HTTP versus SSE

Pricing

PlanPriceWhat’s included
PersonalFreeUp to 6 users, unlimited user devices, up to 50 tagged resources, 1,000 minutes/month of ephemeral resources, Tailscale SSH (up to 5 hosts), 3 ACL groups
Standard$8 per user, per monthEverything in Personal, plus unlimited users, SCIM user and group provisioning, 10 ACL groups, device posture integrations with MDM/EDR/XDR, advanced user roles
Premium$18 per user, per monthEverything in Standard, plus 300 ACL groups, 10,000 minutes/month of ephemeral resources, just-in-time access, network flow logs and log streaming, priority support
EnterpriseContact salesEverything in Premium, plus solutions engineer support, custom MSAs and SLAs, dedicated professional services, payment by invoice

Pricing reflects information as of August 2026. For the latest details — including whether annual billing offers a discount and the terms under which Aperture is available — see the official site.

Pros & Cons

Pros

  • Fast to adopt: install the app on each device and sign in — no router configuration or port forwarding required
  • Individuals and small teams can do quite a lot within the free plan (up to 6 users, unlimited user devices)
  • Because connections are peer to peer by default, a central VPN appliance is less likely to become a bottleneck
  • ACLs are managed as code (a policy file), so permission changes can be reviewed like any other change
  • Broad range of uses: remote work, multicloud, IoT, and CI/CD
  • Aperture extends the same identity foundation to govern how AI agents use tools

⚠️ Cons

  • Per-user pricing means costs accumulate as headcount grows ($8 per user per month on Standard)
  • The control plane (authentication and key distribution) depends on Tailscale’s service; teams that want to own it entirely need to consider alternatives
  • At larger scale, designing ACLs and tags demands policy-design knowledge rather than traditional networking knowledge
  • The free plan has limits such as 50 tagged resources (servers and the like) and Tailscale SSH on up to 5 hosts
  • AI-related features like Aperture are relatively new, so their scope and terms may change

Comparison with Similar Services

CriteriaTailscaleTwingateCloudflare AccessZeroTier
ProviderTailscale Inc. (Canada)Twingate (US)Cloudflare (US)ZeroTier, Inc. (US)
Underlying technologyWireGuardProprietary protocolCloudflare’s edge networkProprietary L2 overlay
Connection modelPeer-to-peer mesh with relay fallbackProxy through connectorsProxy through the edgePeer-to-peer mesh
Primary useTeam connectivity, server access, AI workloadsZero-trust access to internal appsAccess control for web apps and SaaSBuilding virtual LANs
Personal useFree plan availableFree plan availableFree plan availableFree plan available
AI agent governanceAperture (consolidates MCP and LLM usage)Not offered as standardSeparate services such as AI GatewayNot offered

Who Is It For

  • Individual developers who want secure access from anywhere to machines scattered across home, office, and cloud
  • Small and mid-sized teams looking to retire VPN appliances and port forwarding in favor of identity-based access control
  • Engineers who need staging or CI/CD environments spanning multiple clouds and on-premises without per-case configuration
  • Anyone who wants to reach a home NAS, Raspberry Pi, or other IoT and home-lab gear while away
  • IT departments that want to govern which teams and individuals may use internal AI agents and MCP servers

Summary

Tailscale combines WireGuard’s fast encrypted transport with identity-based policy management and a near-zero-configuration onboarding experience. Its strength is that the same model scales from a personal home lab to a corporate network of thousands, and the free Personal plan is genuinely useful on its own. On the other hand, per-user pricing makes cost meaningful as teams grow, and you should be comfortable entrusting the control plane to the vendor. A good approach is to install it on two or three machines first, see how a tailnet behaves, and consider team rollout or Aperture afterward.

← Blog