Multi-tenant teams that scale.
Multi-tenant organizations with role-based access. Invite by link or email. Each org gets isolated networks, policies, and certificates.
- Multi-tenant isolation
- Role-based access (Owner / Admin / Member)
- Email & link invitations
- Per-org settings and CA
Acme Corp — Members
8 membersThree clear roles, sensible defaults.
Three clear roles with sensible defaults. Every action is permission-gated.
Owner
Full control. Manage billing, delete organization, transfer ownership. One owner per org.
Admin
Day-to-day management. Invite members, manage devices, create policies, view recordings.
Member
Standard access. Connect devices, use tunnels, access assigned resources. No admin capabilities.
Two ways to grow your team.
Email invitations for specific people, shareable links for open onboarding.
Email invitation
Send a personalized invite to a specific email address. Set role on invite. The user joins with the assigned role automatically.
Invite link
Generate a shareable link. Anyone with the link can join your org as a Member. Revoke anytime, set expiry.
One user, many organizations.
Switch between teams instantly. Each org is completely isolated.
Complete isolation
Each org has its own devices, policies, groups, certificates, and audit logs. No data leaks between orgs.
Instant switching
Switch between organizations from the dashboard or CLI. No re-authentication required.
Per-org settings
SSO provider, certificate CA, DNS settings, and policies are all scoped to individual organizations.
Spin up an isolated org in minutes.
Free for every feature while we're in beta. Invite your team, assign roles, and keep every tenant fully isolated.