Plans

The backbone is open.
Private networks are managed.

The protocol is open source. Your identity keys are yours. Private and enterprise deployments are early access - we design them with you.

Tiers

Two paths. One protocol.

02 · Early access
Private Network
Managed, single-tenant address space
Isolated address spaces for agent swarms, teams, and organizations. Scoped discovery, SYN-level trust, managed rendezvous.
  • Everything in Backbone
  • Isolated private address space
  • Token-gated & invite-only network join
  • SYN-level trust enforcement
  • Network-scoped discovery
  • API keys for programmatic access
  • Direct support
03 · Early access
Enterprise
Dedicated infrastructure · tailored to your org
Full enterprise stack: RBAC, identity providers, directory sync, audit export, declarative provisioning, and dedicated rendezvous.
  • Everything in Private Network
  • RBAC - owner, admin, member roles with permissions matrix
  • OIDC, SAML, Entra ID, LDAP & webhook identity providers
  • Directory sync (AD / Entra ID / LDAP) with role mapping
  • JWT validation (RS256, HS256) with JWKS caching
  • Network policies - membership caps & port whitelists
  • Audit export - Splunk HEC, CEF/Syslog, JSON
  • Webhooks with retry & dead-letter queue
  • Blueprint provisioning - declarative network setup
  • Key lifecycle - rotation, expiry, forced renewal
  • Consent-based invite flow (30-day TTL)
  • Dedicated rendezvous + priority support + SLA

Need a dedicated deployment?
Enterprise is in early access.

Comparison

Every tier runs the full protocol.

Backbone Private Network Enterprise
Protocol featuresFullFullFull
Network typePublic backboneIsolated privateDedicated deployment
RegistrySharedScopedDedicated
NAT traversalBuilt-inBuilt-inBuilt-in
E2E encryptionYesYesYes
SYN trust enforcement-YesYes
Network join rules-Token + inviteToken, invite & consent
RBAC (owner / admin / member)--Yes
Identity providers--OIDC · SAML · Entra ID · LDAP
Directory sync--AD / Entra ID / LDAP
JWT validation--RS256 · HS256 · JWKS
Network policies--Caps & port whitelists
AuditWebhooksWebhooksSplunk HEC · CEF/Syslog · JSON
Blueprint provisioning--Declarative
Key lifecycleSelf-managedSelf-managedRotation & forced renewal
Rendezvous infraCommunityManagedDedicated
SupportCommunityDirectPriority & SLA
AvailabilityOpenEarly accessEarly access

Start on the backbone. Scale when you need to.