Hysen Labsnetbird
Connect your devices into a secure WireGuard®-based overlay network with SSO, MFA and granular access controls.
NetBird: WireGuard networking with central access control
NetBird joins machines into a WireGuard overlay network and pairs it with a centralized access control system, minus the port forwarding and VPN gateways.
One platform, two halves
NetBird is described as a way to connect devices into a secure WireGuard based overlay network with SSO, MFA, and granular access controls. The README frames it as two ideas in one platform: a configuration free peer to peer private network, and a centralized access control system. The pairing is the point. The network handles connectivity, and the access control layer decides who gets in, from a single place. For a small team or a home network, skipping the VPN hardware is a meaningful simplification, and the README is built around that message.
Why skip the VPN gateway?
The network side of NetBird creates a WireGuard based overlay network that automatically connects machines over an encrypted tunnel. The README frames that as leaving behind the usual hassle of opening ports, wrestling with complex firewall rules, and standing up VPN gateways. Because it is configuration free, the pitch is that machines on the network connect to each other without an operator walking through a setup checklist first. The encrypted tunnel is the common thread, and everything else is meant to stay out of the operator's way.
Access control, and the agent network
On the access side, granular policies are applied from a single place and work on any infrastructure. The README also mentions a beta NetBird Agent Network aimed at identity aware access control for AI agents, with keyless access to LLM APIs and private resources over the encrypted NetBird tunnel. Documentation, a Slack channel, and a community forum are linked for support. The agent network is the clearest sign of where the project is pointing next.
Community notes