Skip to content
MangoFly

  • MangoFly

    A self-hosted WireGuard mesh. Devices connect straight to each other; the coordination server is one binary and a SQLite file, and never sees their traffic.

    ExploreDocsPricing
    encrypted WireGuard · peer to peerLaptopbehind home NATServerin a datacentrePhoneon mobile datacoordination serverone binary · one SQLite filecontrol plane only (TLS)keys · tunnel addresses · peer lists · sealed ICE candidatesholds no private keys · carries no traffic · cannot decryptdatacontrol

  • MangoDock

    Docker management with nothing on the hosts. Reaches each daemon over an ordinary SSH session — no agent to install, no port to open.

    ExploreDocsPricing
    The MangoDock dashboard showing three host cards with container state counts, CPU and memory gauges, a usage history and recent events

  • MangoWiFi

    A Wi-Fi 6/7/8 test bench. One binary runs as Console or Agent either side of the access point under test, measuring latency under real load.

    ExploreDocsPricing
    AP under testWi-Fi 6 / 6E / 7Agentstation side · real radioLAN receiveriperf3 -sConsoleUI · orchestrates · probes
  • Blog

  • Nothing phones home

    No telemetry, no analytics, no crash reporter, no account login. Check it with a packet capture on your own network.

    Download MangoSSH
  • Project
  • Download

    • Free & Pro

    What is free permanently, what Pro gates, and what expiry does.

    Everything that shipped through v0.14.0 is free, permanently: Networks, Resources, policies, Services, routes, exit nodes, users, the audit log, the relay, DNS, API tokens, service accounts, SCIM, configuration as a file, metrics, and the whole desktop client.

    What Pro adds

    • Device approval — Setup keys that require an admin to admit each device.
    • Directory login and device sign-in — LDAP, directory-group mapping, sign-in expiry, and requiring a device to sign in again.
    • Posture checks — Creating and changing them.
    • Workload services — The zero-trust catalog and its grants.

    When a licence expires

    The server starts normally and Pro features go read-only: reads work, deletes work, changes return an error. The mesh itself is never affected — nothing in licensing is reachable from the path that keeps devices connected. A malformed or forged licence, by contrast, refuses to start the server at all.

    ← Operating itWhat is not built →