Company access, with your data staying on your server.
Remote teams, staging environments, secure access to offices and a device fleet. Zorven runs on your own server, so traffic and data never pass through a SaaS abroad. You decide who reaches what.
Control, auditability and data residency for your team
Every feature below is listed with the plan it belongs to. No hidden doors.
Self-hosted, data stays local
Traffic and data stay on your own server, an architecture that suits Turkish KVKK requirements. The hosted version runs on a server in Istanbul.
Organizations, projects and roles
Organization and project structure, owner/admin/member roles, and joining by email invitation. The team page is on Pro and above; the member limit depends on the plan.
Enterprise sign-in
OIDC SSO, 2FA and Google/GitHub login, so it fits alongside your team's existing identity setup.
Device fleet and policies
Device tags, central agent configuration and resource policies based on tags and roles. Agent configuration is on Pro and above.
Zorven Network: a private network without a VPN
Build a private network between your office and remote devices. Zorven Network is on Team and above.
Zero-trust access (Enterprise)
Mandatory 2FA and source IP range conditions. Zero-trust access is available on the Enterprise plan only.
Edge gateway: policy, WAF, mTLS, secrets
Policy engine (including WAF and webhook signature verification), IP allowlist, mTLS and Secret Vault (secrets are stored encrypted). Policy, WAF, secrets and IP allowlist are on Pro and above; OIDC SSO and tunnel mTLS are on every plan.
Audit log and log export
Audit log, alerts and log export. Log export is on Team and above, as are advanced load balancing (round robin, weighted, least connections, latency) and HTTP/TCP health checks. The audit log is kept for 365 days.
Web door
Raw TCP/UDP tunnels such as SSH, databases and games are not left open to everyone: a teammate or customer signs in on the door URL with a password or Google / GitHub and only their own IP address is allowed for the duration you choose (1 hour to 7 days). You can see active grants and revoke them (revoking also signs the person out). Blocked attempts are counted in the statistics. Pro and above; if the plan drops below Pro, the door closes automatically.
Platform mailbox in mail apps
Use your organization mailbox (org-name@mail.zorven.app) in the Gmail app, Outlook, Apple Mail and Thunderbird: IMAP 993, SMTP 587 / 465. App passwords are created per mailbox, shown once and revoked from the dashboard. Sending to external recipients follows the same plan rule as webmail (Enterprise); internal platform addresses are always delivered.
Access control and statistics
On protected tunnels every sign-in attempt (method, provider, identity, result, IP) is stored; 24-hour, 7-day and 30-day summaries are available from the API. A dashboard screen is on the way. Visitors see a branded login page instead of the browser password popup.
Add a device, join the private network
Install the client on fleet devices, connect with a token, run it as a service. Reach the private network over a local SOCKS5 proxy.
Install the client on a device (Linux/macOS)
Connect with the token from the panel
Run as a background service
Join the private network (Team and above)
The visitor side of an SNI TCP tunnel
Zero-trust conditions and policies are managed in the panel; these commands are the client side only. See the docs for details.
Matched to your team size and requirements
What you need and the plan it lives on, stated plainly. Over quota, speed is reduced but the connection is not cut.
Pro
- 3 members, 10 projects, team page
- Policy engine, Secret Vault, IP allowlist
- 15 clients, 20 tunnels
- 100 GB per month, 7 days of logs
Team
- 5 members, 50 projects, 50 clients
- Zorven Network (private network)
- Log export, advanced load balancing
- 250 GB per month, 30 days of logs
Enterprise
- Unlimited resources and members
- Zero-trust access conditions
- 90 days of log retention
- External sending from team webmail; help deploying on your own infrastructure
Team webmail comes as org-name@mail.zorven.app in the panel. For Enterprise, get in touch. Full table: pricing.
Business FAQ
More answers in the full FAQ.