Your own private edge, wherever your team works

Run Gateways on any Linux machine, wherever your people travel. Every remote worker’s internet traffic enters through the closest one, encrypted from the very first hop.

Safe on any Wi-Fi

Public Wi-Fi without the eavesdroppers

Public Wi-Fi at coffee shops, airports, and hotels is shared with everyone nearby. Firezone encrypts every packet from the device to the nearest Gateway you run, so there’s nothing to snoop on.

Nothing breaks

Private apps keep their fast path

Traffic for your private Resources still goes straight to their own Site and Gateway. Only everything else heads out through the nearest Internet Gateway.

ClientAWS us-east-1db.corp.internalBerlin office10.20.0.0/16Internet GatewayEverything else

Your DNS, your rules

Control DNS on every device

Choose how every Client resolves the internet from one setting. Keep each network’s own resolver, encrypt every lookup with DNS-over-HTTPS from a trusted provider, or point devices at your own resolvers to filter malware and phishing.

Settings/DNS

Upstream Resolvers

Google Public DNSCloudflare DNSQuad9 DNSOpenDNS
example.com → DNS-over-HTTPS to Quad9 DNSEncrypted

Public Wi-Fi. Private traffic.

Full-tunnel routing with the Internet Resource is included on the Team, Business, and Enterprise plans.