XplicitTrust Network Access vs atreoLINK

XplicitTrust Network Access is a next-generation VPN network that automatically creates tunnels between devices, anywhere. Without the need to touch your firewall. You can precisely control who can see and connect to which machine, through single sign-on, multi-factor authentication, and access control policies. Unlike traditional VPNs, which usually terminate tunnels at the firewall / network perimeter, XplicitTrust tunnels span all the way to the desired target device(s). No more need for VPN gateways, complex firewall rules, network segmentation via subnets / VLANs, VPN client configuration files, and unreliable VPN clients.

atreoLINK is self-hosting, for the whole family. It's the easiest way to share your home server's apps with the people you trust, and to reach them securely from anywhere. Run atreoAGENT on your home server or homelab, install atreoLINK on every family member's iPhone or iPad, and your self-hosted apps are a tap away. No port forwarding. No DNS setup. No VPN configuration. Just a custom subdomain with automatic HTTPS, a direct WireGuard tunnel, and encrypted push notifications. WHAT YOU CAN DO • Open your self-hosted apps from anywhere, in the built-in private browser • Receive end-to-end encrypted push notifications from your apps and services • Set up your server in minutes. Pair once, then it stays connected automatically • Invite family members and choose which apps each person can see • Manage your servers, devices, and invited users from one place DESIGNED FOR FAMILIES atreoLINK is built for households, not just sysadmins. As the owner, you approve every family member and pick what they can access. Invitations are cryptographically signed by you, so even atreoLINK itself can't add anyone to your household. PRIVACY BY DESIGN Your traffic flows directly between your phone and your server over WireGuard. atreoLINK helps the two sides find each other, but it never sees the bytes in between, never holds your passwords, and never has the keys to decrypt your notifications. Push notifications are encrypted on your server before they leave it, delivered as ciphertext, and decrypted only on your device. ACCOUNTS atreoLINK requires an account to sign in. You can create one to accept an invitation and connect your device to a family member's server. Learn more at atreolink.com. WireGuard is a registered trademark of Jason A. Donenfeld.