№ 02 / Pillar
Your office, your laptops, your servers — on one private network.
No public IPs to defend, no VPN appliance to renew, no holes in the office firewall. Included from Mesh upward.
No more
- − Punching holes in the office firewall to reach the file server.
- − Buying a hardware VPN appliance and renewing its license every year.
- − Asking the IT contractor to "fix the VPN" because someone moved offices.
- − Public IPs and port-forwarding rules nobody understands six months later.
Instead
- + One app per device. The laptop dials in; nothing's exposed to the public internet.
- + Your devices form their own private network. Other customers can't see it; we can't see inside it.
- + Office, datacenter, home, hotel, café — same private network, everywhere.
How traffic flows, by tier
Same private network —
drawn three ways.
Each tier handles reach differently — public TLS only at Core, a private tunnel from Mesh upward, and a full office-to-cluster mesh on Fleet. The diagrams show the difference at a glance.
Core
Public · TLS
Your team reaches the suite over the public internet, encrypted in transit. The cluster's address is shared with other Core customers behind a single ingress.
Mesh
+ Private tunnel
Each laptop dials a private tunnel into your dedicated cluster. Login screens are not on the public internet — only your enrolled devices reach them.
Fleet
+ Office mesh
Mesh + your office router joins the same private mesh. The file server, the printers, and the on-prem services all sit on the same fabric as the cluster.
Differs by tier
Core
Mesh
Fleet
Network
Your team reaches the suite over the public internet, encrypted in transit.
Plus a private network covering every device. Login screens nobody else uses don't sit on the public internet.
Mesh + your office router joins the same private network — file server and printers come along.