Every scenario, end to end.
Eleven scenarios our customers ship with us. Filter by what you're optimizing for, search by what hurts.
Freelance access that revokes itself.
Hand a contractor a token with a 2-hour TTL. The access vanishes — you cannot forget to close it. No tickets, no shared admins, no cleanup later.
Your services don't exist for scanners.
No public DNS records for internal services. Direct requests fail with a DNS error. With the extension, DNS resolution happens at the gateway, invisibly routing your team to the right IP.
Migration testing without touching system files.
Domain-level DNS overrides. Switch between the old and new server with one click in the extension. QA and clients never edit /etc/hosts again, and you don't need a staging subdomain.
Three regions in one window. Without the lag.
Domain-level split tunneling (SNI). German admin site routes via DE gateway, US site via US gateway, YouTube stays direct. Each domain picks its own gateway. Direct traffic stays direct.
Cap exfiltration before it happens.
Per-token bandwidth quotas. A compromised contractor can't dump 50 GB out the door — they hit 500 MB and the gateway drops the connection instantly. Admins can increase quotas on the fly.
Deploy your own gateways without terminal access.
Run as many self-hosted edge nodes as you need on your own hardware or cloud accounts. Our centralized Control Plane manages all your distributed gateways through a single interface.
From Docs to Prod, gradually.
Day 1: Wiki. Week 1: Staging. Month 1: Prod. Grant access to a whole project but disable sensitive domains initially. Enable them gradually as the new hire progresses.
Tokens you can actually dictate over the phone.
Just 5 base58 characters. Easy to copy, paste, or read aloud without sending config files or massive links. Cryptographically protected against brute-force.
Securely expose internal tools on localhost.
The gateway is a lightweight 8MB Go binary. Install it on your server and route friendly domains (like shop.grafana) directly to 127.0.0.1:3000 or a private IP. No public exposure, no VPNs required.
Reach internal domains blazingly fast from anywhere.
Because the gateway is located in a datacenter and has its own built-in DNS resolver, DNS queries to 1.1.1.1 or 8.8.8.8 are significantly faster than resolving from the user's local network. Plus, you can map internal domains like grafana.internal for the whole team automatically.
Drop legacy VPNs and heavy ZTNA agents.
Most teams run a VPN or a complex ZTNA client just to access a few admin panels and an internal wiki. Replace them with our extension: reclaim CPU, battery, and avoid the flaky reconnect dance.
Ship Zero-Trust by lunch.
Install the extension, drop a token in the chat, and watch your admin panel go invisible.