Sovereign alternative to Tailscale
Sovereign Zero Trust VPN, control plane in Europe
The open-source alternative to Tailscale, operated for you. Headscale control plane hosted in Europe, end-to-end WireGuard-encrypted traffic, standard Tailscale client.
What the managed service covers
Headscale is the open-source control plane compatible with the Tailscale client. Bunker hosts it in Europe, while your WireGuard traffic stays end-to-end encrypted.
Deployment and updates
We install, configure and keep the latest stable version up to date. You have no server to administer.
Encrypted backups
Daily encrypted backups, kept in Europe. A restore is one ticket away.
Monitoring and security
Monitoring, security patches and firewall handled continuously by our team.
Human support
A team that answers on software it operates itself.
- Control plane hosted in Europe
- End-to-end WireGuard encryption
- Standard Tailscale client
- Open source, re-internalisable
Hosted in Europe, outside US jurisdiction
Tailscale hosts your network’s control plane (who talks to whom) in the United States. A Headscale control plane in Europe keeps that map of your infrastructure on the continent, and stays re-internalizable.
- Servers physically in Europe, operated by a European company.
- A European company, outside the scope of the US CLOUD Act and FISA.
- No subcontracting to a US hyperscaler.
- Re-internalizable: you can bring the service back onto your own servers.
Frequently asked questions
Do I have to change VPN client?
No. You keep the standard Tailscale client; only the control plane changes, hosted in Europe.
Does traffic pass through your servers?
No. WireGuard traffic is end-to-end encrypted, peer-to-peer. We only operate the control plane.
Is it reversible?
Yes. Headscale is open-source and re-internalizable, so you can bring the control plane back onto your own servers.
Deploy Sovereign Zero Trust VPN in Europe
We handle hosting, updates and backups. You keep control of your data, and the ability to bring everything back in-house whenever you decide.