Underpass
NEWReach outside services from one address

All your devices.
One private network.

Underpass connects your computers, servers and cloud machines so they reach each other from anywhere, safely and privately. Nothing is left open to the internet.

Underpass for Windows

Windows 10 and 11, 64-bit

About a minute · Free · No router changes

Connected
This device: laptop (100.64.0.7)

Network devices

db-prod100.64.0.21
nas100.64.0.9
Disconnect
9:41
Today
Using an AI agent?llms.txt
Runs on
  • Windows
  • Linux
  • Docker
  • Kubernetes
  • Raspberry Pi
  • macOSSoon
How it works

Three steps.
No setup headaches.

No network settings to change and nothing to configure by hand. Your first two devices can be talking to each other in a few minutes.

Continue with Google
you@company.com
Email me a code
1

Sign in

Create your network with your Google account or a code we email you. No special hardware needed.

office-pc wants to join

Windows 11 · Acme network

DenyApprove
2

Approve each device

Install the app on your Windows or Linux computers, then approve each one from your browser.

$

3

Connect by name

Every device gets its own simple name. Reach it from anywhere, as if it were on your desk.

Product

Everything a private network needs.
Nothing it doesn't.

A small app on each device and a simple dashboard for everything else. No extra hardware to buy or look after.

01Connections

Direct connections

Your devices talk straight to each other, so it's fast. It works from home, the office, a café or a hotel, even on networks that usually get in the way.

How it works
Typical VPN86 ms
laptopVPN box · far awaydb-prod
Underpass9 ms
laptopdb-prod
02Names

Easy names

Every device and app gets a simple name. Type the name, not a string of numbers you'll forget.

How it works
Go to a device…Ctrl K
  • nasFiles100.64.0.4
  • grafanaDashboards100.100.0.2
  • db-prodDatabase100.64.0.7
03Uptime

Always available

Run an internal app on two machines under one name. If one stops, the other takes over on its own.

How it works
grafana· up

mon-a

Serving

mon-b

Standby

04Outside services

One address for outside services

Some services only let in addresses you've approved. Send that traffic through one of your machines, and approve one address instead of everyone's.

Amara · homeJonas · caféPriya · hoteloffice-gw203.0.113.24github.comapi.partner.iobank-portal
05Team

Bring your team

Invite people by email or link and approve who joins. Your network stays completely separate from everyone else's.

How it works
Acme team4 people
  • AAmara OkaforOwner
  • JJonas WeberAdmin
  • PPriya ShahMember
  • KKenji ItoMember

Invite to Acme

By email or with a link

sam@acme.comSend invite
06Access

Control who reaches what

Choose which people and devices can reach each other.

How it works
Groupdb-prodbuild servers
Engineering
CI runners
Sales
Use cases

Use case

Your team's tools, from anywhere

  • Everyone signs in with Google or a code by email
  • Invite people with a link and approve who joins
  • Reach internal tools by name, from home or on the road
  • Fast, direct connections wherever people are
  • See every sign-in and change in the activity log
acme · people
Invite linkacme.underpass/join/8f2kqCopy
AAmaraOwner
JJonasAdmin
PPriyaMember
KKenjiMember
LLeaMember
OOmarMember

sam@acme.com wants to join

Acme · invited by Amara

DenyApprove
Works with

Runs on the computers and clouds you already have. Reaches every app you already use.

If it runs on your network, you can reach it from anywhere: no special plugins, nothing to change.

soon
soon
The problem

Old VPNs were built for an office.
Your team isn't in one.

A traditional VPN sends everyone through one central box that sits open on the internet. That worked when everyone was in the same building.

01TodayWith Underpass

An open door

The VPN box has to stay open to the whole internet, so anyone can try to get in.

With UnderpassNothing is left open. There's no door to knock on.
02TodayWith Underpass

The long way round

Everything travels through one central box, even between two people in the same city.

With UnderpassYour devices connect straight to each other.
03TodayWith Underpass

Breaks on real networks

Hotel Wi-Fi, phone hotspots and some home internet providers often block it.

With UnderpassIt finds a way through, with a backup route if needed.
04TodayWith Underpass

One box to fail

When the central box goes down, nobody can work.

With UnderpassThere's no central box to fail.

Hover or tap a card to see the fix

Pricing

Simple pricing.
One price for your whole team.

Start free. When you grow, pay one flat monthly price for the whole team, not per person.

Free

$0/ month

free forever · no credit card

For you and a couple of friends or teammates.

Peopleup to 3
Devicesup to 25
  • Every feature, nothing held back
  • Community support
  • Yours as long as you like

Team

Most popular

$29/ month

whole team · about $1.93 a person when full

For a growing team, one price for everyone.

Peopleup to 15
Devicesup to 250
  • Everything in Free, with room to grow
  • Email support
  • No per-seat fees, ever

Business

$99/ month

whole team · about $1.98 a person when full

For larger teams with lots of machines.

Peopleup to 50
Devicesup to 1,000
  • Everything in Team, with room to grow
  • Priority support
  • No per-seat fees, ever

More than 50 people, or need something specific? We'll put together a plan with you.

Talk to us
FAQ

Straight answers.

Something we didn't cover? Write to us and we'll help you get set up.

Ask us anything
  • No. Underpass works with the internet connection you already have. It finds a way to connect your devices on its own, and nothing on your network is left open to the internet.

/ Independent · bootstrapped · no investors

Built by a person,
not a fund.

I'm Endi, and I build Underpass myself. No investors to answer to, only the people who run their networks on it. Every message that comes in reaches me directly.