Managed, time-boxed access to private networks.
WireHop connects engineers, operators, and organizations to internal gateways and private infrastructure without permanent VPNs or new inbound firewall openings. Issue scoped, expiring device connections — instantly for owners and admins, or through an approval workflow for members and contractors — governed by roles, groups, and access policies.
Authenticate via Google, GitHub, or email/password—with dedicated Restricted SSO Recovery reserved for verified organization owners.
WireHop 0.1.12
Address range: 10.24.0.0/16
Built around clear operational workflows
Every layer of WireHop—from initial gateway enrollment to day-to-day session auditing—is structured so teams can grant private network access with confidence.
Organizations, gateways & device access
Create an isolated organization, register gateways inside your VPC or on-premise environment, and issue scoped, time-boxed device connections — instantly for owners and admins, or as approval-based access requests for members and contractors.
- Isolated organizations with their own members, gateways, and activity
- No inbound firewall changes at your site — gateways connect outbound only
- Desktop client for Windows, macOS, and Linux (v0.1.12)
- Start free — no credit card required, with a 14-day Business trial
Roles, gateway assignments, groups & policies
Replace broad, standing network access with composable controls. Combine roles, groups, per-member gateway assignments, and allow/deny policies with connection leases that expire automatically.
- Roles, groups, assignments & allow/deny policies
- Time-boxed connection leases from 1 hour to permanent
- Access requests with owner/admin approval or rejection
- Contractor access with enforced end dates
- Corporate SSO (OIDC/SAML, Business plan) with required-SSO policy and owner recovery
Gateway health, activity history & admin controls
Maintain visibility across every gateway and device. Inspect gateway health, connection history, approvals, and administrative changes from a single console.
- Real-time gateway health & connectivity status
- Audit trail of connection, member, policy & billing activity
- Blocked-traffic and connection activity views
- Privacy-first: zero advertising or analytics cookies
Organization owners and admins can ask the built-in assistant about gateways, connections, access requests, and recent activity — and propose changes in chat. Every change requires an explicit confirmation and is re-authorized before it runs; members and contractors keep a human-only workflow.
Explore how WireHop operates in context
Switch between Gateway Health, Access Control Policies, and Activity History to inspect how WireHop manages time-boxed access across your infrastructure.
| Gateway Identifier | Private Network Segment | Assigned Groups | Active Sessions | Health Status |
|---|---|---|---|---|
| gw-prod-core-01 | 10.24.0.0/16 | Platform-Admins, SRE-OnCall | 4 devices (time-boxed 4h) | ONLINE · 14ms |
| gw-staging-k8s-02 | 10.48.12.0/24 | Backend-Eng, QA-Release | 9 devices (time-boxed 8h) | ONLINE · 21ms |
| gw-internal-db-vault | 172.16.80.0/24 | DBA-Restricted | 1 device (time-boxed 1h) | ONLINE · 9ms |
| Policy Name | Applies To | Allowed Destinations | Rules | Lease Limit |
|---|---|---|---|---|
| Production incident access | Group: SRE-OnCall | gw-prod-core-01 | Allow TCP 443, 22 — deny other ports | 4 Hours |
| Database maintenance window | Group: DBA-Restricted | gw-internal-db-vault | Allow TCP 5432 | 60 Minutes |
| Daily staging development | Group: Backend-Eng | gw-staging-k8s-02 | Allow all protocols | 8 Hours |
| Timestamp | Actor / Device | Event Action | Target Resource | Lease / Outcome |
|---|---|---|---|---|
| Just now | alex@acme-infra.io · macOS (0.1.12) | Opened time-boxed connection | gw-prod-core-01 | EXPIRES IN 3H 58M |
| 18 mins ago | priya@acme-infra.io · Linux (0.1.12) | Updated member gateway assignments | gw-staging-k8s-02 | POLICY APPLIED |
| 1 hour ago | system-scheduler | Automatic lease expiration & teardown | gw-internal-db-vault | SESSION CLOSED |
Documentation
Product guidance is being prepared alongside the evolving platform.
This index will become the source of truth as workflows stabilize. For now, the dashboard provides the current operational guidance in context.
Getting started
Create an organization, add a gateway, and issue device access.
Access controls
Learn how roles, gateway assignments, groups, and policies work together.
Operations
Reference material for gateway health, activity history, and admin controls.
How WireHop workflows fit together
| Workflow Stage | Primary Component | Operational Behavior |
|---|---|---|
| 1. Organization Setup | Organization Slug & Owner Identity | Establishes tenant boundary and configures restricted SSO recovery for the designated organization owner. |
| 2. Gateway Registration | WireHop Gateway Node | Connects your private network to the WireHop control plane with outbound-only connectivity and no inbound ports exposed. |
| 3. Policy & Group Assignment | Roles, Groups & Access Policies | Maps which groups can reach which gateways; allow/deny rules control ports and protocols, and lease limits cap how long a connection can run. |
| 4. Client Connectivity | WireHop Desktop (`0.1.12`) | Installed once on Windows, macOS, or Linux; users authenticate with their WireHop account to activate scoped access. |
Downloads
The desktop client connects your computer to the networks you have access to. Install it once, then sign in with your WireHop account. The tray app lists your active connections, runs one connection at a time, and notifies you before a connection expires — and shows managers new access requests.
Windows
Desktop installer package for 64-bit Windows workstations and laptops.
macOS
Native Apple Silicon disk image for macOS laptops and desktops.
Linux
Portable AppImage and native Debian/Ubuntu package for 64-bit Linux systems.
Installers are unsigned, so your operating system may warn you before running one. Confirm the version and publisher before installing.
Recent releases
| Version | Platforms | Published Date | Release |
|---|---|---|---|
| 0.1.12 LATEST | Windows (x64), macOS (arm64), Linux (AppImage / .deb) | Oct 9, 2026 | GitHub release ↗ |
| 0.1.11 | Windows (x64), macOS (arm64), Linux (AppImage / .deb) | Oct 8, 2026 | GitHub release ↗ |
| 0.1.10 | Windows (x64), macOS (arm64), Linux (AppImage) — first macOS / Linux builds | Oct 8, 2026 | GitHub release ↗ |
| 0.1.9 | Windows (x64) | Oct 8, 2026 | GitHub release ↗ |
| 0.1.8 | Windows (x64) | Oct 7, 2026 | GitHub release ↗ |
Account & Organization Access
Preview WireHop's sign-in, account creation, password recovery, and restricted SSO owner recovery flows—or continue directly to app.wirehop.io ↗. Accounts support email verification and optional authenticator-app two-factor with recovery codes; organizations on the Business plan can enable corporate SSO sign-in with OIDC or SAML.
Sign in
Access your WireHop account and private networks.
Continue with Google Continue with GitHub Continue with company SSO