Secure connectivity
When we need to connect elements that sit outside our platform — your
servers, devices, or IoT equipment — we don't expose them to the
Internet: we join them to an encrypted private network built on the
WireGuard protocol.
How it works
WireGuard is a modern VPN protocol that establishes end-to-end encrypted
tunnels between nodes, using current cryptography (Curve25519 key
exchange and ChaCha20-Poly1305 encryption). Each device or server is an
authenticated node on the network; traffic travels encrypted and no
port is exposed to the public Internet.
What we use it for
External and IoT devices
We provide secure connectivity to devices outside our infrastructure
(for example, IoT equipment on your premises). Each device joins the
private network as an encrypted node: it can communicate with your
environment without opening ports or being published on the Internet.
If a device is compromised, its access is scoped and revocable without
affecting the rest.
Deployment on your own servers
When your environment is deployed on your own servers (on your
premises or with your provider), we don't open your server to the Internet
to manage it: we set up an encrypted WireGuard tunnel to it and operate
over that private channel. The server is never exposed; it's only
reachable from the private network.
Why it's secure
- End-to-end encryption between nodes (no plaintext segments).
- Minimal exposure: no ports open to the Internet.
- Per-node identity: each device or server authenticates itself; access
is revocable one node at a time.
- Segmentation: each node can only reach what it's authorized to reach.
In summary
We connect your servers and devices to an encrypted private network
(WireGuard), without exposing them to the Internet, with end-to-end
encryption and per-node revocable access.