Marg Twingate

Simplifying access to staging environments, internal dashboards, and improving security using two-factor authentication to access all our company's cloud resources

Explore Enterprise Pricing Options with their team

You pay for for User, not Client or Resources - easy to roll out to all devices used by your users.

Access management for cloud-based resources.

Better security.

No more hassle of maintaining IP allow lists for WFH / remote teams. Some people had their IPs change once a day, this solved a major hassle for our SRE team.

- Eliminates public attack surfaces

- Granular least-privilege access

- Easy to deploy & manage

- Fast and Reliable

Twingate allowed us to very easily move to a model of zero-trust networking and drop our previous OpenVPN-based solution entirely. We have now removed all instances in our private network with public IP addresses and our attack surface has been greatly reduced.

Setting it up was as simple as running their Docker image in all of the private networks that we want to allow restricted access to.

We quickly configured multiple different user groups within the Twingate admin panel and were able to restrict access to a subset of resources within each of our networks, per-group. For example, we created a "Business Analyst" group that only had access to our data warehouse, and a "Data Engineer" group that had access to the data warehouse and a couple of other resources to support that system. This level of granularity would have been much harder to accomplish using a tool like OpenVPN.

Installation of the Twingate was incredibly simple - the client is easily downloaded and configured for Mac, Windows, and Linux.

Authentication is linked to our GSuite account. This means we no longer have to create new VPN users when we onboard an employee, and it also means that access is immediately revoked when an employee leaves the organization is removed from GSuite.

There are still some features we haven't taken advantage of, like adding MFA when SSHing into a production instance, but we look forward to exploring these features as we build out the integration further.

One downside of Twingate is that the upfront cost is expensive than our previous solution (OpenVPN). However, with OpenVPN, we were running it ourselves on our 2 EC2 instances and had to manage and maintain those servers. Despite the higher upfront cost, we decided to switch to Twingate anyway because we felt like we were getting a lot more value.

Another downside is that we're now trusting another company with an incredibly important part of our infrastructure. If Twingate goes down, employees won't be able to access resources in our private networks. This is a risk we're willing to take, and we know that Twingate takes it seriously as well.

Twingate has allowed us to very quickly give employees access to remote, private resources, and secure those resources based on different access-levels within our organization.

Since setting it up, we've saved time with each new onboarded employee, and have decreased the overall access each employee has to different parts of our infrastructure.

Absolutely loving them for Google Login and super simple client. For small companies when you don't have SSO, and don't want to manage separate vpn users, its a must have.

Also it was super easy to deploy and start using them

They also have good api, so you can manage resources with automation

Nothing comes in mind so far. We started with them pretty early, documentation on that time wasn't as polished as it is now, but Twingate team was very helpful, so everything went smoothly

Access to private AWS infrastructure (including private EKS) for a small development team from different countries.