Developer ToolsTempl
Type-safe HTML templating language for Go with compile-time safety
Tailscale is the WireGuard-based mesh VPN that replaces legacy corporate VPNs with an identity-first, zero-config network. It is now used by 20,000+ businesses and trades at a $1.5B valuation after its April 2025 Series C.
Tailscale is a zero-trust, identity-based mesh networking platform built on WireGuard that replaces legacy VPNs, SASE stacks, and privileged access tools with a flat overlay network you can stand up in minutes. We rate it 90/100 — if you have ever fought with OpenVPN, hand-rolled IPsec, or sat on a ticket queue waiting for a bastion host, Tailscale is the obvious upgrade and worth every cent of the $8/user business plan.
Tailscale is two things. First, it is an open-source client (github.com/tailscale/tailscale, Go, BSD-3-Clause) that runs on Linux, macOS, Windows, iOS, Android, FreeBSD, and even inside Docker — and in Kubernetes as an operator. Second, it is a hosted coordination service at tailscale.com that brokers WireGuard key exchange and authentication against your existing identity provider. Once you tailscale up, every device you add joins a single private network — a tailnet — with a stable 100.x.y.z IP and MagicDNS hostname, reachable end-to-end-encrypted even across NATs and firewalls.
The company was founded in 2019 in Toronto by CEO Avery Pennarun, CTO David Crawshaw, and Brad Fitzpatrick (the author of memcached and Go's HTTP stack). On Tailscale closed a $160M Series C led by Accel at a ~$1.5 billion post-money valuation, bringing total funding to $275M across 4 rounds. The company now serves 20,000+ businesses including Instacart, Mercury, Duolingo, Hugging Face, Mistral, Cohere, Nvidia and Microsoft, and reports more than 10,000 paying business tailnets. The latest client release is v1.96.4, shipped on , and the main repo sits at roughly 30.7k GitHub stars.
laptop.tail-scale.ts.net — no more remembering 100.64 IPs or keeping a /etc/hosts file in git.tag:prod-db), define groups, and write rules like {"action": "accept", "src": ["group:eng"], "dst": ["tag:prod-db:5432"]}.Sentiment across Hacker News, r/selfhosted, r/homelab, and r/sysadmin is among the most positive we see for any infrastructure product. The recurring refrain on HN is that Tailscale feels like "magic" — users regularly describe connecting 10–12 devices across home, office and cloud in under ten minutes. The Reddit homelab crowd loves MagicDNS and exit nodes enough that a common complaint is simply "I can't go back to regular VPNs."
The honest criticisms are specific. On G2 and Reddit, teams at scale complain that ACLs and DNS management get cumbersome past a few hundred devices, and that the Admin API still lacks bulk tag operations as of Q1 2026. Several HN commenters note that while the client is open source, the control plane is proprietary — a real concern that the community project Headscale addresses but with reduced feature parity. Pricing at $18/user/month for Premium is the other recurring gripe from growing teams, especially those that want just-in-time access and flow logs but cannot justify a $216/seat/year line item.
Tailscale rolled out a simplified "Pricing v4" on that expanded the free plan and retired the old usage-based Starter tier. The current tiers:
| Plan | Price | Key Limits |
|---|---|---|
| Personal | $0/month | Up to 6 users, unlimited user devices, 3 ACL groups, 50 tagged resources, 1,000 ephemeral minutes/month |
| Standard | $8/user/month | SCIM, 10 ACL groups, advanced roles, MDM, device posture integrations, webhooks |
| Premium | $18/user/month | 300 ACL groups, 10,000 ephemeral minutes/month, just-in-time access, advanced SSH, network flow logs, log streaming, priority support |
| Enterprise | Custom | Solutions Engineer support, custom MSA & SLAs, dedicated professional services, invoice billing |
A 14-day free trial covers business plans, nonprofits and accredited schools get a 50% discount, and eligible early-stage startups can apply to the Tailscale for Startups program for credits. Existing customers keep their prior pricing for at least 12 months.
Best for: platform and DevOps teams replacing OpenVPN or hand-rolled IPsec; startups that need a zero-trust story without buying a SASE suite; developers who want laptop-to-homelab access; and AI teams that need to govern LLM API keys and coding agents through Aperture. If your access pattern involves "I need to SSH into a VM in another VPC from my laptop on hotel Wi-Fi," Tailscale solves it in one command.
Not ideal for: regulated environments that require an on-premises control plane Tailscale does not officially offer (Headscale is an unsupported community option); very large fleets (10,000+ devices) where bulk ACL tooling and API limits still feel rough; and users looking for a consumer privacy VPN in the Mullvad or ProtonVPN sense — that is not what Tailscale is.
Pros:
Cons:
Twingate — similar zero-trust remote access with a stronger PAM story but a more opaque closed architecture and less open-source tooling. ZeroTier — open-source mesh networking with a more networking-centric model (virtual L2), but weaker identity and SaaS polish. Cloudflare Access / WARP — excellent for HTTP apps and already bundled for Cloudflare customers, but less flexible for arbitrary TCP/UDP workloads. Headscale — fully self-hosted reimplementation of Tailscale's control plane; great for sovereignty, but you inherit all the ops.
Tailscale is the rare infrastructure product that is both easier and more powerful than what it replaces. If you are a team of fewer than ~500 people and your current VPN story is painful, a Standard plan at $8/user/month will pay for itself the first time nobody has to reset an OpenVPN config on a Saturday. We rate it 90/100 — the one-point-per-complaint deductions are for control-plane opacity, bulk ACL tooling at scale, and Premium pricing. For 95% of teams, this is the best VPN replacement shipping today.
OpenAI Launches GPT-Rosalind — Its First Life Sciences Model for Drug Discovery and Genomics (April 2026)
OpenAI on April 16, 2026 debuted GPT-Rosalind, a frontier reasoning model purpose-built for biology, genomics, and drug discovery. Named after Rosalind Franklin and trained on 50 standard biological workflows, it launches as a trusted-access research preview for Amgen, Moderna, the Allen Institute, and Thermo Fisher Scientific.
Apr 19, 2026
Google Launches Native Gemini App for macOS With Global Option+Space Shortcut (April 2026)
Google on April 15, 2026 shipped a native Swift-based Gemini app for macOS Sequoia, adding system-wide Option+Space invocation and window-sharing context — finally matching ChatGPT and Claude's long-standing Mac presence.
Apr 19, 2026
Mintlify Raises $45M Series B at $500M Valuation as AI Agents Now Drive Half of Docs Traffic (April 2026)
Mintlify closed a $45M Series B led by Andreessen Horowitz and Salesforce Ventures at a $500M valuation on April 14, 2026. The round cements a new thesis: documentation is the interface AI agents actually read — and about 50% of traffic to Mintlify-powered docs now comes from agents, not humans.
Apr 19, 2026
Is this product worth it?
Built With
Compare with other tools