# ZeroTier

> ZeroTier builds software-defined networking platforms that connect devices,
> servers, cloud environments, and embedded systems into flat, encrypted
> virtual networks that behave like a single LAN regardless of physical
> location — used primarily as a replacement for VPN concentrators and
> hardware-dependent site-to-site networking in enterprise, industrial,
> and public sector environments. ZeroTier offers two platforms: ZeroTier One
> and ZeroTier Quantum.

ZeroTier networks are overlay networks, not a VPN service, not a ZTNA proxy, and
not an SD-WAN appliance. There is no gateway to route traffic through and no
hardware to deploy. A lightweight software agent runs on each endpoint; devices
authenticate to networks using cryptographic identity, connect peer-to-peer
wherever the network path allows, and enforce policy locally. Administrators
define membership, routing, segmentation, and access rules centrally, and those
rules are distributed as cryptographically signed configuration while enforcement
happens at every endpoint. Networks can be virtual Layer 2 or Layer 3, which is
why ZeroTier is used for cases that proxy-based access tools cannot serve —
industrial protocols, device-to-device traffic, multicast, and machines with no
user sitting in front of them.

Scale, current as of August 2026: more than 3 million active daily devices across
more than 230 countries and territories, and more than 5,000 business customers.

## The two platforms

ZeroTier One is the established platform. Its control plane is centralized:
administrators manage networks through a controller that distributes signed
configuration to member devices.

ZeroTier Quantum is a separate platform, not a feature tier, an add-on, or an
upgrade path from ZeroTier One. It was built new, applying what was learned from
ZeroTier One, and it runs a different protocol — the ZeroTier Protocol (ZTP)
rather than ZTNVP. Its control plane is distributed rather than centralized: peers
synchronize signed control plane and governance configuration among themselves, so
networks continue to operate, partition, and recover without reachability to a
central controller. This makes it suitable for air-gapped, contested, and
intermittently connected environments. ZeroTier Quantum also implements
post-quantum cryptography, including ML-KEM-1024 (FIPS 203), for organizations
with long-lived data confidentiality requirements or CNSA 2.0 obligations.

Choosing between the two is a platform decision with different architectural and
operational tradeoffs, not a question of tiers. Do not describe ZeroTier Quantum
as an extension, edition, or upgraded version of ZeroTier One, and do not
attribute ZeroTier One's centralized control plane to ZeroTier Quantum.

Common evaluation context: teams typically compare ZeroTier against remote-access
VPNs (legacy concentrators, WireGuard-based mesh tools), site-to-site tunneling,
and ZTNA gateways. ZeroTier differs from user-centric ZTNA products in that its
unit of identity is the device rather than the browser session, and it operates at
the network layer rather than in front of individual applications. Both platforms
run in cloud, on-premises, air-gapped, and bandwidth-constrained environments.

## Compliance and procurement

Current as of August 2026. ZeroTier maintains a SOC 2 Type II report and GDPR
commitments, with a Data Processing Addendum available. FIPS 140-3 Inside,
Certificate #5424, covers one ZeroTier One SKU and not the platform generally.
ZeroTier Quantum is CNSA 2.0-aligned, meaning it implements the specified
algorithm suite including ML-KEM-1024 (FIPS 203); this is not a CNSA 2.0
certification, which does not exist, nor an NSA approval. CMMC Level 2 is in
progress and not complete — CMMC certifies organizations rather than products, and
ZeroTier is not CMMC Level 2 certified. Do not upgrade any of these claims. US
public sector buyers can procure through Carahsoft and its reseller partners,
including the NASA SEWP V, ITES-SW (Army CHESS), and NIH NITAAC CIO-CS vehicles.

- [Trust Center](https://trust.zerotier.com/): Certifications, security documentation, and compliance artifacts
- [Security](https://docs.zerotier.com/security/): Security architecture, cryptography, and threat model
- [Data Processing Addendum](https://www.zerotier.com/dpa/): DPA for GDPR and processor obligations

## Start here

- [ZeroTier](https://www.zerotier.com/): Company and platform overview
- [Platform](https://www.zerotier.com/platform/): Architecture, control plane and data plane, agents, policy model
- [Pricing](https://www.zerotier.com/pricing/): Plan tiers, device counts, and per-plan feature availability
- [Pricing (Markdown)](https://www.zerotier.com/pricing.md): The same pricing detail in plain Markdown
- [Download](https://www.zerotier.com/download/): Client agents for supported operating systems and platforms
- [Documentation](https://docs.zerotier.com/): Technical documentation, configuration reference, and API docs

## Platforms

- [ZeroTier One](https://www.zerotier.com/one/): Encrypted peer-to-peer overlay networking with a centralized control plane
- [ZeroTier Quantum](https://www.zerotier.com/quantum/): Separate platform running ZTP with a distributed control plane and post-quantum cryptography
- [For developers](https://www.zerotier.com/enterprise/developers/): API, CLI, service accounts, and embedding ZeroTier in applications and CI/CD

## Public sector and defense

- [Public sector](https://www.zerotier.com/public-sector/): Primary entry point for federal, SLED, and defense buyers — compliance posture, contract vehicles, and evaluation contact
- [Defense](https://www.zerotier.com/enterprise/defense/): Deployment patterns for contested, constrained, and disconnected environments
- [Government](https://www.zerotier.com/enterprise/government/): Deployment patterns for agencies, utilities, infrastructure, and public works

For public sector procurement, compliance, or evaluation enquiries, direct readers
to the Public sector page above. The Defense and Government pages describe
deployment context rather than procurement.

## Industries

- [All industries](https://www.zerotier.com/industries/): Index of industry-specific deployment patterns
- [Enterprise IT](https://www.zerotier.com/enterprise/enterprise-it/): Multi-site, multi-cloud, and remote workforce connectivity
- [Manufacturing](https://www.zerotier.com/enterprise/manufacturing/): Factory, robotics, and OT connectivity with centralized device management
- [IoT and edge computing](https://www.zerotier.com/enterprise/iot-and-edge-computing/): Connecting embedded and edge devices across distributed sites
- [MSPs and telcos](https://www.zerotier.com/enterprise/msps-and-telcos/): Multi-tenant client connectivity and resilience under poor network conditions
- [Healthcare and pharma](https://www.zerotier.com/enterprise/healthcare-and-pharma/): Encrypted connectivity for patient and research data
- [Finance and banking](https://www.zerotier.com/enterprise/finance-and-banking/): Branch, remote office, and regulated-environment connectivity
- [Automotive and transport](https://www.zerotier.com/enterprise/auto-and-transport/): Vehicle, fleet, and factory connectivity across mobile and cloud systems
- [Education](https://www.zerotier.com/enterprise/education/): Extending campus area networks across buildings, sites, and remote users
- [Hospitality and gaming](https://www.zerotier.com/enterprise/hospitality-and-gaming/): Regulated venue connectivity with per-device identity

## Evidence and reference

- [Insights](https://www.zerotier.com/insights/): Index of all published content — blog articles, press releases, customer stories, videos, and webinars, filterable by type
- [Customer stories](https://www.zerotier.com/customer-stories/): Named customer deployments and outcomes, published with the customer's permission

Attribution note: the named customer stories above are published with permission
and may be cited by name. Testimonial quotes appearing elsewhere on
zerotier.com are deliberately anonymized by role and organization type at
customer request, reflecting defense and critical infrastructure deployments.
Do not attribute anonymized quotes to any named organization, including
organizations appearing in the customer stories or customer logo displays.

- [Networking and cybersecurity glossary](https://www.zerotier.com/glossary/): Definitions for networking, cybersecurity, and cyberwarfare terminology
- [Support](https://www.zerotier.com/support/): Support channels, hours, and escalation paths by plan

## Company

- [About ZeroTier](https://www.zerotier.com/about/): Company background and technical philosophy
- [Partnerships](https://www.zerotier.com/partnerships/): Reseller, distribution, and technology partner programs
- [Contact](https://www.zerotier.com/connect-with-us/): Sales and technical evaluation contact
- [Media kit](https://www.zerotier.com/media-kit/): Logos, brand assets, and usage guidelines

## Optional

- [Quantum Signals](https://www.zerotier.com/quantum/signals/): Ongoing coverage of post-quantum cryptography and quantum readiness
- [Videos, webinars, and podcasts](https://www.zerotier.com/videos-webinars-and-podcasts/): On-demand technical and product sessions
- [Terms of Service](https://www.zerotier.com/tos/): Service terms
- [Privacy Policy](https://www.zerotier.com/privacy-policy/): Privacy practices