🇪🇺 European ZTNA — Built and operated from the EU

Deliver secure remote
access to your clients.
No VPNs.

WireZTNA is the 100% European white-label ZTNA platform, designed for MSPs. Multi-tenant, built on WireGuard, with an admin panel and native clients for every platform. EU infrastructure. GDPR-native compliance. Deploy in minutes. Scale without limits.

Request Partner access See the platform
The problem with traditional VPNs

VPNs are a risk
for you and your clients

Every site-to-site VPN you configure is an attack surface you manage. Full network access, shared credentials, zero visibility into who accesses what. The Zero Trust model changes everything.

82%

of breaches involve misconfigured remote access (Verizon DBIR 2024)

45 min

average time an MSP spends configuring a VPN per new client

0

granular visibility into who accesses which resource on a classic VPN

The platform

Complete ZTNA. White-label.
Ready for your clients.

Built on WireGuard — the fastest and most secure VPN protocol in the world — with a Zero Trust control layer enabling granular access by user, group, and resource.

Real Zero Trust

Each user only sees the resources they are assigned. No lateral access, no broadcast, no risk of lateral movement.

  • Access by User → Group → Publisher → CIDR
  • Published Apps with specific port and protocol
  • Ephemeral sessions with rotating PSK (configurable TTL)

Native multi-tenant

Each client is an isolated tenant with its own broker, publishers, and policies. Manage them all from a single panel.

  • Complete isolation between tenants
  • White-label: your brand, your domain
  • Automatic provisioning for new clients

Deploy in 5 minutes

Publisher as an 8 MB Go binary — no Docker, no dependencies. One command to connect your client's network to the broker.

  • Onboarding: a single install command
  • Supports Linux, macOS, Windows (ARM and x86)
  • Token-based enrollment: the client touches nothing
For MSPs and VARs

Built for your
profitability.

We're not another product you need to learn to sell. We're your secure remote access tool — with your brand, your margin, and zero friction for the end client.

💰

Recurring margin

Resell as a managed service with your own pricing. Typical margin of 40-60% over platform cost.

🏷️

100% White-label

Your brand on the admin panel, on the clients, on the emails. Your client never sees "WireZTNA".

⚡

Instant deployment

New client onboarded in 5 minutes. Publisher installed with a single command. No hardware, no third-party licenses.

🇪🇺

European cloud

Infrastructure 100% in the EU (Frankfurt). GDPR-native compliance. Your data and your clients' data never leaves Europe. No dependency on US providers.

📊

Full visibility

Real-time active flows, audit logs, broker metrics, remote diagnostics. All without a VPN to the client.

🌍

Multi-region

A single broker can manage publishers in any location. AWS, Azure, on-prem, remote offices — all connected.

Architecture

How you connect your client's network

01

Install the Publisher

A Go binary on the client's network. No Docker, no dependencies. Self-registers with a unique token.

02

Define policies

In the web panel: which users access which CIDRs, ports, or published applications. Groups for bulk management.

03

Onboard users

Generate a token, send it to the user. wireztna enroll <url> — connected in 30 seconds.

04

Monitor and scale

Real-time flows, remote diagnostics, broker metrics. Add clients without touching infrastructure.

Clients macOS · Windows · Linux iOS · Android Broker Managed cloud Zero Trust Policies Split DNS · nftables Auto-reconciliation Publishers Client's network On-prem · AWS · Azure WireGuard + PSK WireGuard Tunnel Admin Panel Web UI REST API Metrics Multi-tenant Audit Logs Diagnostics

WireZTNA vs. the competition

An honest comparison with the alternatives you already know.

WireZTNA Tailscale Cloudflare Access VPN IPSec
White-label ✓ Full ✗ ✗ N/A
MSP Multi-tenant ✓ Native Partial ✓ ✗
Cost per user From 5€ $6-18/user $7/user Hardware
Granular Zero Trust ✓ CIDR + Port + App Partial (ACLs) ✓ ✗ Full network
Protocol WireGuard WireGuard QUIC/cloudflared IPSec/OpenVPN
User experience

A client your users will actually enjoy

Modern terminal interface with real-time status, live latency, traffic sparklines, scrollable logs, and one-key diagnostics. Available on macOS, Linux, and Windows.

WireZTNA TUI client demo — showing connection status, project selector, network diagnostics, and live log viewer
📊

Live status & traffic sparkline

🔀

Project & VPN exit node selector

🌐

Network info with syntax highlighting

📜

Scrollable logs with level filtering

Partner Pricing

Wholesale pricing for MSPs

You set the price for the end client. We give you the platform at wholesale cost.

Starter

Up to 50 total users

5€ /user/month
  • Up to 5 tenants
  • White-label panel
  • Email support
  • Managed cloud
Get started
Popular

Growth

50 – 300 users

4€ /user/month
  • Unlimited tenants
  • White-label + custom domain
  • Priority support + Slack
  • VPN/Exit node mode
  • SSO/OIDC integration
Talk to sales

Enterprise

300+ users

Custom
  • Everything in Growth
  • Dedicated account manager
  • HA with automatic failover
  • 99.9% SLA + 24/7 support
  • Roadmap influence
Contact us

No commitments. No setup fees. Monthly or annual billing (2 months free).

Frequently asked questions

Do I need my own infrastructure to get started?
No. The platform runs 100% on our managed cloud. You only deploy publishers (a lightweight binary) on your clients' networks. No servers to maintain, no updates — we handle everything.
What does the end client need on their network?
Just a publisher — an 8 MB Go binary that runs on any Linux (VM, bare metal, Raspberry Pi). It installs with one command and self-registers with a token. No inbound open ports required, no Docker, no dependencies.
Can I use it with my existing RMM/PSA tools?
Yes. WireZTNA exposes a full REST API. You can automate provisioning, list connected users, generate enrollment tokens, and query metrics from any tool that speaks HTTP (ConnectWise, Datto, custom scripts, n8n, etc.).
Which platforms does the client support?
macOS (Intel + Apple Silicon), Windows (10/11, x64 and ARM), Linux (amd64 + arm64), and coming soon Android and iOS. The client is a native binary with CLI and TUI — distributed as MSI on Windows, brew on macOS, and APK/APT on Linux.
Are there lock-in periods or minimum commitments?
No. Monthly billing with no lock-in. Scale up or down based on your active clients. If you stop using it, export your configs and migrate without lock-in. The publisher code is open-source.
Is it secure? What cryptography does it use?
WireGuard is the most audited VPN protocol with the smallest attack surface (4,000 lines of code vs 600,000 for OpenVPN). It uses Curve25519, ChaCha20, Poly1305, BLAKE2s. Additionally, WireZTNA adds ephemeral per-session PSKs that rotate automatically — even if a key is compromised, the window is limited.

Join the
Partner Program.

Early access to the platform, direct support from the engineering team, and special conditions for early adopters.

Current partners: MSPs in Europe are already offering WireZTNA as a managed service to their clients. We have limited spots available in the early partner program.

No entry cost
Demo in 24h
Free trial tenant