Everything a modern mesh needs — and nothing it doesn't.
A complete control plane built on proven primitives, with the operational surface trimmed to what matters.
WireGuard mesh
Encrypted peer-to-peer tunnels between every device, coordinated automatically. No hub to bottleneck your traffic.
Private TxNets
Carve isolated networks — each with its own devices, users, and policy — from a single control plane.
Native apps
First-party TxHub apps for Windows, macOS and Linux. Install, sign in, and you are on your network — no configuration.
Access policy control
Declarative rules decide exactly who reaches what. Fail-closed by default — access is granted, never assumed.
Device & user management
Approve devices, manage users, and see your entire fleet at a glance from one dashboard.
Device names
Every device gets a name automatically under your TxNet domain, like laptop.acme.tx.net. Reach machines by name, not IP address.
Relay servers
In-region relays keep peers connected through strict NATs and firewalls — with no public cloud in the path (Iceland).
OIDC sign-in
Authenticate with your identity provider. Microsoft Entra ID supported out of the box.
Sovereign by design
TxHub runs the entire control plane in-region — Iceland or US. Nothing phones home, nothing leaves your jurisdiction.
Sovereign networking, operated for you.
Pick your region, connect your first devices, and see the mesh form in minutes.
Prefer to talk first? info@txhub.is