Tailscalevs
Prometheus
Prometheus: Open source monitoring and alerting toolkit for cloud native environments
Tailscale
Zero-trust mesh VPN built on WireGuard with identity-based access
As of 29 August 2026, Tailscale is free to use. Tailscale is a mesh VPN platform that replaces traditional corporate VPN, PAM (privileged access management), and SASE solutions. Softwr lists it under Networking. Tailscale is available on Linux, macOS, Windows, iOS.
Overview
What Tailscale does
Tailscale provides modern mesh networking by eliminating the need for bastion hosts, VPN concentrators, and centralised network appliances. Rather than routing all traffic through a single gateway, Tailscale creates direct encrypted peer-to-peer connections between devices using WireGuard protocol, with automatically brokered key exchange and firewall hole-punching to traverse NAT. Identity-based access control replaces traditional IP-whitelisting; policies enforce access based on user identity, device posture (antivirus status, disk encryption), and role rather than source IP address. The platform supports cross-platform deployment (Linux, macOS, Windows, iOS, Android, NAS systems, IoT devices) and infrastructure-agnostic connectivity across single cloud, multi-cloud, and hybrid environments. Deployed by over 40,000 businesses including Microsoft, NVIDIA, Duolingo, and Hugging Face, Tailscale offers tiered pricing: Personal tier (free for up to 6 users), Standard (£8 per user per month), Premium (£18 per user per month, with advanced security features), and Enterprise (custom pricing for large organisations). All tiers support unlimited devices per user and seamless roaming between networks. Premium tier unlocks network flow logs, device posture integration, just-in-time access workflows, and priority support. The platform also provides Aperture, a separate tool for governing AI agent access to infrastructure. Tailscale competes with traditional VPNs (NordVPN, ExpressVPN), Cloudflare's Zero Trust platform, and custom WireGuard deployments. Unlike consumer VPNs, Tailscale focuses on private network access rather than internet anonymity. Advantages include simplified deployment (setup takes minutes), direct peer connections reducing latency, and unified access control. However, it requires active deployment and management; enterprises cannot simply enable it as a passive security layer.
What people use it for
- Remote team access to internal services without VPN concentrators
- Hybrid cloud connectivity across AWS, Azure, GCP, and on-premises networks
- CI/CD pipeline access to internal infrastructure (databases, Kubernetes clusters)
- Zero-trust access to SSH, Kubernetes, and databases without bastion hosts
- Mobile and IoT device management in enterprise environments
- Temporary contractor and third-party access control
The honest half
Where it falls short
Concrete and checkable, so you can decide whether any of them matter to you. This is the half of a review a vendor will not write about Tailscale.
- Requires active configuration and management; cannot be deployed passively like consumer VPNs
- Device posture policies and JIT access tiers are locked behind Premium subscription (£18/month), raising per-user costs for enterprises
- Limited support for legacy protocols and non-modern operating systems (Windows 7, older Android versions)
- Centralised control plane operated by Tailscale (hosted in US); no self-hosted control plane option for air-gapped or sovereign deployments
- Cannot replace full VPN functionality for accessing legacy IP-based services; only applicable to modern infrastructure
Cross-shopped
What people choose instead of Tailscale
Each pairing was judged by two reviewers asking whether a buyer would genuinely weigh the two against each other. The ones that failed were deleted rather than published.
- TailscalevsCloudflare
Cloudflare: The web performance and security company
- TailscalevsConsul
Consul: Service discovery, networking, and security
- TailscalevsGrafana
Grafana: Observability and Data Visualization
Pricing
What Tailscale costs
Taken from the vendor's own pricing page. Prices move, so check before you buy.
Personal
Free
- Up to 6 users
- Unlimited devices per user
- 1,000 ephemeral resource minutes per month
- Basic ACL groups (3)
- Community support
Standard
$8 /mo
- Unlimited users
- Unlimited devices
- 1,000 ephemeral resource minutes per month
- 10 ACL groups
- Device posture integrations
- Email support
Premium
$18 /mo
- Unlimited users and devices
- 10,000 ephemeral resource minutes per month
- 300 ACL groups
- Network flow logs
- Just-in-Time access
- Device posture integrations
Enterprise
Free
- Custom pricing
- Unlimited resources
- Advanced security features
- Dedicated support
- Custom SLAs
Answered, with sources
Questions people ask
Each answer names the page it came from, so you can check it rather than take our word for it.
Is Tailscale free?
Tailscale Personal tier is free forever for up to 6 users. Standard (£8/month per user) adds team features, Premium (£18/month per user) adds security controls, and Enterprise tiers are custom priced.
SourceDoes Tailscale route all traffic through a central gateway?
No. Tailscale creates direct encrypted connections between devices using WireGuard. It only proxies traffic when direct peer connections are not possible (some restrictive NAT scenarios). This reduces latency and eliminates VPN gateway bottlenecks.
SourceCan I host Tailscale on-premises?
No. Tailscale provides a hosted control plane only. For fully self-hosted mesh networking, consider WireGuard with manual key management or Netmaker. Tailscale Enterprise can provide custom deployments for specific requirements.
SourceKeep looking
Where to go from Tailscale
- Tailscale alternativesEvery product people weigh against it
- Tailscale pricingPlans, floors and what the tiers exclude
- Tailscale badgesWhich rules it meets, and the figure behind each
- All Networking softwareThe full category
- Best Networking softwareThe shortlist, and how it was cut
Best Networking software for
Compare Tailscale with
- Twingate
- NetBird
- OpenVPN
- Headscale
- ZeroTier
- Consul
- Nebula
- Grafana
- Prometheus
- Cloudflare
- Auvik
- Zabbix
- MikroTik RouterOS
- Ubiquiti UniFi
- Domotz
- HiveMQ
- Headscale
- Zabbix
Other Networking software
Zero trust remote access that publishes individual resources instead of a network
Free plan12 researched notesOpen source WireGuard mesh VPN with identity based access policies and a hosted control plane
Free plan12 researched notesOpen source VPN protocol with a commercial Access Server product priced per simultaneous connection
Open source12 researched notesOpen source reimplementation of the Tailscale coordination server for a single organisation
Open source12 researched notesSoftware-defined mesh networking, free up to 10 devices and one network, then billed per device
Free plan12 researched notesCertificate based overlay network from Slack, with identity and firewall rules carried in the certificate
Open source12 researched notesOpen source monitoring and alerting toolkit for cloud native environments
Free plan11 researched notesCloud-based network monitoring and management priced by managed device count, quote-only
Pricing on request12 researched notesOpen source infrastructure and network monitoring with distributed proxies and templating
Open source10 researched notesRouter and network operating system with a one-time perpetual licence rather than a recurring subscription
12 researched notesEffortlessly manage 100+ APs in the same way you manage an individual AP
6 researched notesNetwork monitoring for MSPs and IT teams priced per managed device or per collector, with published rates
12 researched notesEnterprise MQTT broker for industrial IoT with a published self-managed price list
Free, then $299/mo12 researched notesOpen source reimplementation of the Tailscale coordination server for a single organisation
Open source12 researched notesOpen source infrastructure and network monitoring with distributed proxies and templating
Open source10 researched notes
Softwr does not host reviews and shows no star rating for Tailscale, because a rating we did not collect is not ours to publish. What is here is the pricing and platform detail from the vendor’s own pages, limitations we could state concretely, and alternatives a reviewer confirmed people weigh against it. Tell us if any of it is wrong.
More on Tailscale
Tailscale alternatives
What people switch to, and what they give up
Tailscale pricing
Every tier, and where the cost actually lands
Compare Tailscale
Put it head to head with anything we hold
Tailscale badge
Its rating, and an embed for your own site
Best Networking software alternatives
Open source infrastructure monitoring, free at its core, with paid support and modules sold separately by Icinga GmbH
Open source core, with paid repository, module and support subscriptions sold separatelyNetwork monitoring for MSPs and IT teams priced per managed device or per collector, with published rates
Per collector or per managed device per month
AI-driven wireless and wired networking where a Wi-Fi Assurance subscription is a required, not optional, add-on
quote, hardware plus required Wi-Fi Assurance subscription
Free, community-driven network monitoring with commercial support sold by a third-party partner, not the project itself
Open source, no licence fee; commercial support sold by a third-party partner
Internet and digital experience monitoring, with a genuinely published entry price through its WebPageTest product line
Free tier plus published entry tiers, enterprise quote-only
Network observability platform built on flow and traffic data, sold on annual-only contracts starting around $24,000/year
Annual contract only, per tier
Cloud-managed networking hardware where the licence is mandatory and the hardware stops passing traffic if it lapses
quote, hardware plus mandatory recurring licenceCloud-based network monitoring and management priced by managed device count, quote-only
quote, per managed device