Ross ROSS = Recommend OSS · open-source software intelligence for agents

Tailscale

Some data may be outdated — see provenance labels.

The easiest, most secure way to use WireGuard and 2FA. observed · 2026-09-30

github.com/tailscale/tailscale · homepage · Go · BSD-3-Clause (permissive) observed · 2026-09-30

Health v2 · maintenance only

98/100

  • Activity 97
  • Release rhythm 97
  • Longevity 100
How is this computed?

round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10) — computed 2026-10-21. Adoption (stars, forks) is never an input.

  • gap_med: 14.0
  • age_days: 2454
  • days_rel: 21
  • days_push: 21
  • n_releases_24m: 43

Full methodology

Adoption not part of the score

37016 stars · 3257 forks observed · 2026-09-30

What it is AI-extracted, prompt v1, taxonomy v1, 2026-09-28, confidence 0.97

Tailscale is an open‑source zero‑trust networking platform built on WireGuard that provides secure, identity‑based connectivity across devices, clouds, and edge environments. It includes a daemon (tailscaled) and a CLI tool for managing private networks called tailnets.

Use cases

  • Connect remote workstations and servers across multiple clouds without configuring firewalls
  • Securely expose internal services to the internet via Tailscale Funnel
  • Provide zero‑trust SSH access to machines without managing SSH keys
  • Enable short‑lived CI/CD runners and Kubernetes pods with ephem​eral resources
  • Implement device‑level access controls using ACL tags and identity providers
  • Monitor network flow and audit configuration changes in real time

When to choose

  • You need a quick, low‑maintenance VPN‑like solution that works on all major OSes
  • Your organization relies on existing identity providers (Okta, Google, Azure AD) for access control
  • You want to secure access to cloud resources, databases, or internal APIs without exposing them publicly
  • You require built‑in MFA, SSO, and granular ACLs for least‑privilege networking

When to avoid

  • You need a fully self‑hosted, on‑premise VPN solution with custom cryptographic stacks
  • Your environment requires deep packet inspection or advanced routing policies not supported by WireGuard
  • Regulatory constraints forbid using third‑party coordination servers for key exchange

Facets

service · maturity active

auth authorization security networking cli security cloud-computing networking infrastructure-as-code windows bsd cli vpn zero-trust wireguard tailnet identity-based mfa sso aperture pam devops linux macos android ios docker

9 sources

Member repositories

For agents

markdown · JSON · MCP: product_card(name="tailscale/tailscale")

Data as of 2026-10-19T08:05:51.212177+00:00 · Report a problem