Too much network reach
Once connected, employees may be able to reach more private systems than their work requires.
Enterprise zero-trust access platform
Connect Securely. Trust Nothing by Default.
VeloTrust is for teams that want control over how people reach private business resources. It combines encrypted connections with employee identity, registered devices, and access policies so organizations can decide who can reach what, and through which device.
Verify identity · Trust devices · Apply policy · Revoke access
Identity→Device→Access policy→Business resource
Start with real access challenges
A network connection should not unlock every resource
Accounts and devices drift apart
Verifying an employee account does not establish that the current device is enrolled and managed.
Access changes take too many steps
When a person leaves, changes roles, or loses a device, admins need a clear way to disable and revoke access.
Administration is scattered
Accounts, devices, access rules, and network settings maintained separately are harder to update and track.
From identity to network enforcement
Make access decisions clear and enforce them on the connection
VeloTrust brings users, devices, business resources, and Gateway rules into one management flow. Employees get the access needed for their work instead of automatic reach into the whole private network.
Identity authentication
Employees sign in with administrator-created accounts. TOTP is available, and Passkeys are supported on compatible Windows Clients.
Device identity
A device is enrolled when an employee first connects. Admins can review or disable it.
Access by resource
Connect employee groups to business resources in access rules, based on work requirements.
Encrypted connection
WireGuard creates an encrypted data path between the Client and a company Gateway.
Gateway enforcement
Gateways restrict reachable resources using the delivered rules; access without a matching allow rule is denied by default.
Access revocation
Disabling an employee or device triggers revocation for online connections; offline devices are checked at their next authentication.
How zero-trust access works
Every access request follows a clear security process
An encrypted tunnel protects data in transit. Identity, device, and access policy determine where a connection can go. Establishing a tunnel does not grant access to every resource.
- 01
Verify the employee
Employees sign in with their own account. Organizations can enable TOTP; Passkeys are supported on compatible Windows Clients.
- 02
Recognize the registered device
The control plane checks the device identity; admins can review or disable devices.
- 03
Evaluate access policy
Admins connect employee groups to the business resources they need and define what is allowed.
- 04
Enforce the network path
HUB synchronizes current configuration. Gateways apply the rules while business traffic uses an encrypted tunnel.
- 05
Change or revoke access
Update access when accounts, devices, or rules change. Disconnected devices are checked again at their next authentication.
Self-hosted deployment
Your organization controls where the platform runs
VeloTrust can run on infrastructure your organization owns or is authorized to manage. Deployment needs Management, HUB, a PostgreSQL database, and a Linux Gateway that can reach private resources; your team operates these components.
Use cases
From remote work to private business resources
Remote employee access
Employees connect from registered devices and reach approved internal services through a company Gateway.
Access by team and role
Give different employee groups access to the resources they need, reducing unnecessary network reach.
Your own infrastructure
Run the platform on infrastructure your organization controls, with a Gateway connected to private resources.
Trial and enterprise licensing
Enterprise licensing
Need higher resource limits, continued use, or enterprise support? Contact us about a signed license.
Ask about licensing30-day offline trial
5 employees · 10 Client devices · 2 Gateways
Starts automatically when a new deployment is initialized; no online activation is required. Current features are available during the trial. At expiry, business tunnel access stops; the Management console and license import remain available.
Downloads and quick start