Mesh VPNs and private networks
Netmaker privacy rating
WireGuard-based platform for building mesh and site-to-site networks, with an open-source server that can be self-hosted and a hosted cloud version.
Summary
Netmaker scores 50 out of 100 (grade D) on the mesh VPNs and private networks criteria. It meets 3 of 7 criteria: open source, no ads or data sales and self-hosted coordination server. It partly meets keys stay on devices. It does not meet no trackers or telemetry and independent audit. Still needing evidence: no connection logs by default. It is based in the United States: Five Eyes member; subject to the US CLOUD Act.
Score 50 out of 100. How scoring works
Criteria
-
Yes
Open source Weight 3 of 3 Source-available
Is all the source code needed to run the product public?
All code is public. The core is Apache-2.0, and features in the pro directory of the same repository use a source-available enterprise license.
-
No
No trackers or telemetry Weight 3 of 3
Are the website and apps free of third-party trackers, with any analytics anonymous and any telemetry off by default?
Self-hosted servers send usage telemetry to PostHog unless it is turned off, and the website loads PostHog and Intercom.
-
Yes
No ads or data sales Weight 2 of 3
Is the product funded without advertising, ad targeting or selling user data?
Funded by paid plans, with a free open-source community edition and no ads.
-
No
Independent audit Weight 2 of 3
Has an independent security or privacy audit been published within the last three years?
No independent audit is published.
-
Partial
Keys stay on devices Weight 3 of 3
Is traffic encrypted between devices with private keys created on each device, so the coordination server and relays cannot read it?
The netclient agent creates its own key pair, but WireGuard configs for devices without netclient, including private keys, are created on the server.
-
Yes
Self-hosted coordination server Weight 2 of 3
Can the coordination or control server be self-hosted with open-source software?
The server is open source and can be self-hosted. Some pro features need a paid license.
-
Unknown
No connection logs by default Weight 2 of 3
Are connection logs and client diagnostic logs kept off the vendor's servers unless a user or admin turns them on?
Needs evidence. Add it