Netmaker

Name: Netmaker
Brand: Netmaker

AI Native

Zero Trust networks with WireGuard.

Est 2021|Valuation $7.1M|Raised $2.8M|18 Ref Customers

LinkedIn 1K|Website|Web traffic 20K|FTEs 10|HQ Candler, North Carolina, US

MarketsEnterprise Networking

Published Oct 15, 2026

01Common complaints

- Company sizes or stages where this product is overkill or insufficient - Very small teams that just need simple remote access with minimal setup may find Tailscale simpler. - Industries or use cases where competitors are clearly superior - Highly regulated industries requiring demonstrable, public compliance artifacts (SOC 2 Type II / ISO 27001) may be better served by vendors with clearly published compliance programs. - Technical requirements that this product cannot meet - Environments with strict constraints on exposed management/control-plane ports may struggle depending on how you plan initial provisioning and ongoing configuration updates. - Budget constraints that make alternatives more appropriate - If you want a “free but easy” experience, headscale+Tailscale clients or other open-source options may be more cost-effective (with different tradeoffs). - Specific workflows or integrations where the product falls short - If you anticipate frequent upgrades across many heterogeneous clients and cannot tolerate reinstall/rollout friction, community comments suggest evaluating upgrade ergonomics carefully. - Red flags in the buying process - Licensing clarity is a recurring community question; if plan differences are not crystal clear in writing for your use case, pause and demand clarification. - Current limitations acknowledged by the vendor - Public docs show significant capability, but explicit “known limitations” lists were not prominent in the sources accessed. Buyers should review release notes and GitHub issues for current constraints. - Features on the roadmap (not yet available) - Not systematically captured in accessible sources for this report; check GitHub issues/milestones and the vendor roadmap if available. - Scale limitations - Netmaker’s docs/marketing suggest scaling to “hundreds or thousands of nodes,” but independent validation is limited in accessible sources. - Security or compliance gaps - Lack of public compliance attestations (SOC 2 / ISO 27001) in accessible sources. - Technical debt / architectural limitations mentioned in reviews - Community posts suggest upgrade/client rollout friction for some users. - API limitations or integration constraints - Netmaker markets “comprehensive API coverage” on comparison pages, but independent validation is limited; verify APIs required for your automation (Terraform, CI/CD, SCIM, etc.) during evaluation.

02Why they buy

- Competitive advantages validated by customer feedback (not just vendor claims) - Performance perceived as strong in community comparisons, often attributed to kernel WireGuard. - Unique features and capabilities competitors lack - Netmaker’s emphasis on multi-network segmentation and “gateway” patterns may be more central to the product narrative than some simpler mesh VPN offerings. - Differentiation from competitors based on reviews - Community suggests: - Netmaker can be faster than Tailscale/NetBird in some scenarios. - But it may require more operational effort. - Areas where competitors clearly have advantages (balanced) - Tailscale is widely regarded (in broader market discourse) as easier to adopt and operate with strong UX. - ZeroTier may have broader general awareness and a longer operating history, though pricing changes are a complaint vector.

03Field reports

- Review-platform reality check (Gartner Peer Insights, G2, TrustRadius) - Gartner Peer Insights - Attempted but inaccessible for Netmaker-specific reviews (Gartner Peer Insights is often gated, and the accessible result during research was the general platform entry rather than Netmaker product reviews). - G2 - Netmaker-specific G2 reviews were not found in accessible search results during this research pass. - TrustRadius - Netmaker-specific TrustRadius reviews were not found in accessible search results during this research pass. - Implication - The review-platform footprint appears limited compared with larger competitors. This does not prove poor quality, but it reduces third-party validation and makes due diligence more dependent on community evidence and technical evaluation. - Community/Social quotes (Reddit, forums) — positive themes - Performance / speed - A selfhosted user comparing mesh tools wrote: “For now installed netmaker and it gives me better speeds vs tailscale and netbird.” (Reddit, r/selfhosted) - Another selfhosted user stated they used Netmaker “because it used kernel wireguard & was faster.” (Reddit, r/selfhosted) - Functional fit for home/SMB routing use cases - One user described a personal setup with multiple egress nodes and ingress, stating “i run it as a personal user and it fits for me..” and uses it to access “everything” via a WireGuard client. (Reddit, r/netmaker) - Community/Social quotes — negative themes - Reliability / inconsistent connectivity - A user reported: “without changing anything at server end, I lost the connection to each other.” (Reddit, r/netmaker) - Upgrade/client lifecycle pain - A selfhosted user said: “when an update of netmaker requires reinstalling all client … I switched completely to headscale.” (Reddit, r/selfhosted) - General frustration / time-to-value - A user post titled “Is netmaker suposed to work ?” says they were “strugling with netmaker … trying to make it work.” (Reddit, r/netmaker) - Licensing confusion - A post titled “Netmaker licencing is very unclear” asks: “Is sefhosted netmaker paid?” (Reddit, r/netmaker) - Why customers chose this product over alternatives (as suggested by community) - Kernel WireGuard performance advantage vs some user-space implementations (especially in comparisons with headscale/Tailscale). (Reddit discussions) - Desire for a self-hosted, open-source control plane (vs fully managed control plane options). - Flexibility: gateways/egress patterns, multi-network segmentation. - Why some customers left for competitors (churn reasons) - Operational friction and client management during updates (reported switch to headscale). - “Tailscale hype” / perceived simplicity and stability after trying alternatives. - Complexity in achieving desired routing behaviors and avoiding edge-case bugs. - Specific outcomes customers achieved (with metrics when available) - Vendor testimonials on the marketing site mention remote work enabling outcomes, but are not independently verified. - Vendor case-study style testimonials - The main marketing site contains testimonials such as “gamechanger” outcomes for remote work and claims about enabling remote work for previously on-site tasks. - Critical evaluation - These are vendor-selected quotes without published methodology, baseline metrics, or independent verification. - Vendor-published performance testing - Netmaker published “VPN speed tests” content asserting WireGuard-based candidates outperform others and positioning Netmaker among top performers. - Critical evaluation - The speed test article is vendor-authored; it may be informative for test design ideas but should not be treated as independent benchmarking. - Independent/academic performance evaluation - A 2024 paper (“Full-mesh VPN performance evaluation for a secure edge-cloud continuum”) references evaluating Netmaker (v0.20.0) and discusses relaying/connectivity considerations. - Critical evaluation - Academic results can be more neutral but may test older versions and specific lab conditions; buyers should compare with current releases and their own topology.

04Best fit

- Company sizes - Likely strongest fit: - 10-500 employees where networking needs exceed “simple VPN” but a full SD-WAN program is overkill. - MSPs managing multiple customer networks (Netmaker markets multi-network segmentation and centralized control plane). - Potentially also fit: - Larger enterprises with strong platform engineering teams, especially if self-hosting and data residency matter. - Industries and verticals where adoption is strongest (with customer examples) - MSPs and IT service providers (explicitly targeted by Netmaker marketing content). - IoT/edge and “device-as-a-service” providers (solution pages discuss edge fleets and device management patterns). - Public transport / edge routing appears in a testimonial on the marketing site (needs independent verification). - Roles and personas - Decision makers - Head of Infrastructure / Platform Engineering - Security leadership (for ZTNA/segmentation requirements) - MSP owner / technical director - End users - DevOps/SRE - Network engineers - IT admins supporting remote access - Pain points and challenges the product addresses - Replacing brittle site-to-site VPNs and ad-hoc WireGuard config distribution. - Secure connectivity across NAT’d sites and multi-cloud, with central policy. - Network segmentation needs across customers or environments. - Qualification criteria: what makes a GREAT fit - You want a WireGuard-based overlay with automation. - You need (or strongly prefer) a self-hosted control plane. - You have staff capable of operating networking software and debugging routing/firewall issues. - Deal disqualifiers: what makes a POOR fit - You need a heavily “productized,” low-ops experience with minimal network engineering time. - You require publicly documented SOC 2 / ISO 27001 today and cannot accept “upon request” or “not available.” - You need abundant third-party review coverage for procurement validation.

05The pitch

- What the product does (core value proposition in objective terms) - Netmaker is an open-source network overlay / “mesh VPN” platform built on WireGuard that automates provisioning and lifecycle management of encrypted connectivity between nodes across cloud, on-prem, and edge environments. It positions itself as a centralized control plane for building segmented virtual networks (multiple overlays) and managing nodes, gateways, relays, policies, and access controls. - The core concept is a peer-to-peer (mesh) overlay where endpoints connect directly when possible, with options for relays and gateway patterns (egress/ingress) for reaching non-Netmaker networks and providing “remote access” user workflows. - Target market and market positioning - Primary target appears to be technical teams who need secure connectivity across distributed infrastructure: DevOps/SRE, platform engineering, MSPs, IoT/edge operators, and companies with multi-site or multi-cloud environments. - Positioning themes: - “Zero Trust” networking with policy-driven access and segmentation. - Higher performance due to kernel WireGuard and (vendor-claimed) optimized relay patterns. - “Self-hosted control plane” as a differentiator vs vendor-hosted-only mesh VPNs. - Company background (founding year, HQ, key leadership) - Netmaker is associated with GRAVITL (open-source company behind the project), and is listed on Y Combinator’s company directory with an active founder/CEO named Alex. (YC does not always expose full corporate details like HQ on the directory page.) - Publicly accessible sources in this research set did not provide a single authoritative “HQ address” page; prospective buyers should confirm jurisdiction, HQ, and support locations during procurement. - Funding and growth: investment rounds, acquisitions, estimated customer count/revenue if public - Funding - Multiple sources report a Seed round of $2.3M completed in October 2022 (investors cited include Lytical Ventures, Uncorrelated Ventures, and SaxeCap). - Growth / customer count - Netmaker’s marketing site claims it is “Trusted by 500+ companies worldwide.” This is a vendor claim; no independent audit was found in accessible sources. - Acquisitions - No acquisitions were found in the reviewed sources. - Pricing model with specific tiers and costs where available - Netmaker presents two major lines: - Community (open source): marketed as “Always free. Always open. Community supported.” - Professional (Cloud or On-Prem): usage-based pricing centered on “daily active connections,” plus hourly charges for hosts and networks. - Published pricing details (as of crawl) - Professional base fees shown include: - “$100 for up to 200 users” - “$500 for up to 500 users” - “$1000 for unlimited users” - Usage rates shown: - “$0.0014 per hour per host” - “$0.014 per hour per network” - The pricing page also describes a base fee that covers the “first 100 users,” and then hourly usage after base fee limits. - Important caveats - Netmaker’s pricing page and help-center pricing explainer should be treated as the source of truth for current billing definitions (eg, what counts as a “host,” “network,” and “active connection”), because marketing summaries can lag. - Total cost of ownership considerations (implementation, training, hidden costs) - Self-hosted operational overhead - Buyers should plan for: - Hosting and maintaining the control plane (Netmaker server, UI, message broker, reverse proxy / ingress). - Certificate management and secure exposure of management endpoints. - Ongoing upgrades and client rollout management. - Networking complexity cost - Many community threads indicate that “making it work” can be non-trivial depending on NAT, firewall rules, routing goals (egress/ingress), and client OS behavior. - Potential hidden costs - Operational time for troubleshooting connectivity edge cases (NAT traversal, subnet overlaps, routing policies). - Enterprise features / licensing ambiguity risk (some users complain about unclear licensing and plan differences). - Key competitors in the space (list 4-6 direct alternatives) - Tailscale (WireGuard-based mesh VPN, managed control plane) - Headscale (open-source control server compatible with Tailscale clients; community-supported) - ZeroTier (overlay networking with custom protocol; managed control plane with some self-host options) - NetBird (WireGuard-based, offers cloud and self-host options) - Nebula (open-source mesh VPN by Slack) - Plain WireGuard (manual configuration / configuration management)

Get a comprehensive analysis of Netmaker including market position, competitive landscape, adoption trends, and peer benchmarks.

Download full report →