# agentsite-static-version=c582aef8-5f87-4796-af04-88ba327e529d
# twingate.com

> AI-optimized mirror of twingate.com containing 244 pages totalling 181,516 words of clean markdown content, structured data, and semantic HTML. Original source: https://twingate.com. Last updated: 2026-10-22T09:20:44.856Z.

Each page is available as HTML (with JSON-LD structured data) and Markdown (text-only, ideal for LLMs and RAG).

## Homepage

- [Twingate: It's time to ditch your VPN](/content/site-root.html): Identity-based access for users, services, and AI agents that deploys in minutes, scales to every resource, and finally lets you retire your VPN. (378 words)

## Articles & Blog Posts

- [Syncing Data to AWS S3 | Twingate](/content/docs/syncing-data-to-s3/index.html): Automatically sync audit logs, network events, and DNS filtering logs to your S3 bucket every 5 minutes using OIDC or IAM. (2,285 words)
- [Route Traffic from Kubernetes | Twingate](/content/docs/k8s-cluster-access/index.html): Set up a router VM with the Twingate headless Client to connect a GKE cluster to private Resources via static routes. (1,902 words)
- [macOS & iOS | Twingate](/content/docs/macos-and-ios/index.html): Deploy the Twingate Client on managed macOS and iOS devices using MDM solutions like Kandji, Jamf, or Apple Business Manager. (1,117 words)
- [Notifications | Twingate](/content/docs/notifications/index.html): Configure granular notification controls (935 words)
- [Case Study: Human Interest | Twingate](/content/customers/human-interest/index.html): Twingate supports Human Interest’s rapidly growing remote workforce, which uses Twingate as a long-term solution that scales with its business, simplifies remote access for employees, and dramatically reduces administrative overhead. (1,165 words)
- [DNS Filtering Overview | Twingate](/content/docs/dns-filtering/index.html): Block security threats and restrict content by domain using DNS filtering profiles, category rules, and allowlist/denylist controls. (1,798 words)
- [Secure Kubernetes Sandbox Access for AI Agents | Twingate](/content/docs/kubernetes-agent-access/index.html): Set up Kubernetes RBAC access for AI agents using Twingate Service Accounts and the Twingate Gateway, without exposing cluster credentials to the agent. (1,806 words)
- [Resources | Twingate](/content/docs/resources/index.html): A practical guide for configuring network resources secured via Twingate. (1,671 words)
- [Connector Failures | Twingate](/content/docs/connector-failures/index.html): How to troubleshoot common Connector issues including offline status, Resource connectivity, and performance (1,486 words)
- [Twingate & Customer Data | Twingate](/content/docs/twingate-customer-data/index.html): What customer data Twingate collects and processes for Private Access, Identity Firewall, and DNS Filtering products. (1,407 words)
- [Split Tunnel Failures | Twingate](/content/docs/split-tunnel-failures/index.html): How to troubleshoot split tunnel issues including local network collisions and missing Resource definitions. (1,362 words)
- [Jamf Configuration | Twingate](/content/docs/jamf-configuration/index.html): Connect Jamf to Twingate to verify macOS devices managed under your Jamf tenant and enforce device verification requirements. (487 words)
- [Headless Clients | Twingate](/content/docs/services-headless-clients/index.html): Connect to Twingate Resources from servers and automation using Service Keys with the Linux or Windows Client in headless mode. (73 words)
- [Case Study:  Criteria Corp | Twingate](/content/customers/criteria/index.html): Criteria uses Twingate to secure its 100% remote workforce’s access to critical resources, making it easier to meet Criteria customers’ demanding compliance expectations. (1,042 words)
- [Internet Security Client Configuration | Twingate](/content/docs/internet-security-client-configuration/index.html): Deploy Machine Keys via MDM to keep DNS filtering active when users are signed out and prevent Client shutdowns. (674 words)
- [Entra ID (formerly Azure AD) Configuration | Twingate](/content/docs/entra-id-configuration/index.html): Set up Entra ID authentication and user sync by configuring the Twingate gallery app with SCIM provisioning. (719 words)
- [Using Twingate | Twingate](/content/docs/using-twingate/index.html): Connecting to your network with the Twingate Client, accessing resources, managing multiple accounts, and handling authentication requirements. (808 words)
- [Intune Configuration | Twingate](/content/docs/intune-configuration/index.html): Set up the Microsoft Intune integration to verify managed devices and require compliance status for Twingate access. (721 words)
- [Privileged Access for SSH Overview | Twingate](/content/docs/ssh-privileged-access-overview/index.html): Add Zero Trust controls to SSH with short-lived certificates instead of distributed keys, plus per-identity audit logs and asciicast session recording. (902 words)
- [Windows Managed Devices | Twingate](/content/docs/windows-managed-devices/index.html): Deploy the Windows Client via EXE or MSI installer with command line options for silent install, network pre-configuration, and MDM integration. (869 words)
- [Subscription Management | Twingate](/content/docs/subscription-management/index.html): Manage billing, licensing, plan upgrades, and renewals for monthly and annual subscriptions based on user counts. (909 words)
- [SCIM Provisioning API | Twingate](/content/docs/scim-provisioning-api/index.html): Technical reference for Twingate's SCIM 2.0 endpoints, attributes, and supported operations. (528 words)
- [1Password XAM Configuration | Twingate](/content/docs/1password-configuration/index.html): Integrate 1Password Extended Access Management (XAM) with Twingate to verify devices and enforce access requirements. (515 words)
- [Case Study: Klever | Twingate](/content/customers/klever/index.html): Leveraging Twingate, Klever Exchange provides secure remote access, minimizes their attack surface, and increases performance for their globally distributed team in an entirely cloud-based environment. (755 words)
- [Supporting Unqualified Domain Names | Twingate](/content/docs/supporting-unqualified-domain-names/index.html): Configure search domains on Connectors so users can access Resources with short names instead of full domain names. (537 words)
- [Two-Factor Authentication | Twingate](/content/docs/two-factor-authentication-security-policies/index.html): Apply 2FA to Resource Policies, Minimum Authentication Requirements, or Admin Console Security. Setup process for TOTP, biometrics, and security keys. (389 words)
- [NextDNS Integration Guide | Twingate](/content/docs/nextdns-configuration/index.html): Twingate currently offers an integration wth NextDNS to provide DNS filtering capabilities as an extension of DNS encryption via DNS-over-HTTPS (DoH). (376 words)
- [DNS Failures | Twingate](/content/docs/dns-failures/index.html): How to Troubleshoot User DNS Issues (692 words)
- [Web App Integrations for Identity Firewall | Twingate](/content/docs/web-app-integrations/index.html): Configure off-the-shelf apps like Grafana and Jenkins to trust Twingate Identity Firewall headers, adding SSO with no code changes and no OIDC integration. (451 words)
- [Identity Providers | Twingate](/content/docs/identity-providers/index.html): Connect Okta, Entra ID, Google Workspace, or other IdPs to manage authentication and sync users. (559 words)
- [Google Workspace Configuration | Twingate](/content/docs/google-workspace-configuration/index.html): Configure Google Workspace authentication and sync users, groups, or organizational units with optional selective sync. (1,036 words)
- [JumpCloud Configuration | Twingate](/content/docs/jumpcloud-configuration/index.html): Connect JumpCloud using SAML authentication and SCIM provisioning to sync selected user groups automatically. (352 words)
- [Admin Console Security | Twingate](/content/docs/admin-console-security/index.html): Configure MFA requirements for Admin Console access using biometrics or security keys to protect administrative functions. (218 words)
- [Network Summary Export | Twingate](/content/docs/network-summary-export/index.html): Export aggregated Remote Network connection statistics including success rates, bandwidth, and protocol usage. (408 words)
- [Twingate Trust Center | Twingate](/content/docs/trust-center/index.html): Security information, compliance certifications (SOC 2, GDPR, HIPAA, DORA, PCI DSS), privacy policies, and legal documents. (140 words)
- [How DNS Works with Twingate | Twingate](/content/docs/how-dns-works-with-twingate/index.html): Detailed walkthrough of CGNAT IP assignment, DNS interception, routing table changes, and how the Client-Connector proxy chain resolves FQDNs. (1,810 words)
- [Peer-to-peer Communication | Twingate](/content/docs/peer-to-peer-communication-in-twingate/index.html): How NAT traversal establishes direct QUIC connections between Clients and Connectors, with details on signaling and Relay fallback. (957 words)
- [Okta Configuration | Twingate](/content/docs/okta-configuration/index.html): Integrate Okta with Twingate for SSO authentication via OIDC and automatic user sync through SCIM. (355 words)
- [Remote Networks | Twingate](/content/docs/remote-networks/index.html): What Remote Networks are, why you need at least two Connectors per network, and how load balancing and failover work automatically. (268 words)
- [Endpoint Requirements | Twingate](/content/docs/endpoint-requirements/index.html): System requirements and firewall rules needed to run the Twingate Client, including required ports and managed device compatibility. (205 words)
- [Network Events Admin Console Export | Twingate](/content/docs/network-events-ac-export/index.html): Generate and download network event reports for selected Remote Networks and date ranges from the Admin Console. (305 words)
- [Remote Development with Twingate SSH and VS Code | Twingate](/content/docs/ssh-remote-development/index.html): Configure VS Code and SSH config auto-sync for remote development over Twingate SSH, so certificates are trusted automatically without TOFU prompts. (305 words)
- [Need help? | Twingate](/content/docs/support/index.html): Access support resources including the help center, community subreddit, billing info, and technical support eligibility. (170 words)
- [Troubleshooting | Twingate](/content/docs/troubleshooting/index.html): Find troubleshooting resources, log collection guides for Clients and Connectors, and links to community support. (108 words)
- [Installing Privileged Access for SSH | Twingate](/content/docs/ssh-installation/index.html): Deploy a Twingate Gateway and configure SSH Resources using the Twingate Terraform provider, with runnable quick-start examples for each major cloud. (216 words)
- [Upgrade to Twingate Home | Twingate](/content/docs/upgrade-starter-to-home/index.html): Redeem your Twingate Home promo code to upgrade your account (155 words)
- [Internet Security Overview | Twingate](/content/docs/internet-security/index.html): Twingate currently offers DNS encryption via DNS-over-HTTPS (DoH) as an additional internet security option that you can enable for users running on desktop operating systems (Windows, macOS, and Linux). (172 words)
- [Audit Logs | Twingate](/content/docs/audit-logs/index.html): View and export admin actions including create, edit, and delete events across your Twingate account for compliance. (115 words)
- [Administration | Twingate](/content/docs/administration/index.html): Configure Admin Console security, and change your billing plan. (101 words)
- [Schema | Docs | Twingate](/content/docs/api/index.html): Twingate Docs (16,263 words)
- [Connector Logging | Twingate](/content/docs/connector-real-time-logs/index.html): Different types of logging available for Twingate Connectors. (909 words)
- [Services | Twingate](/content/docs/services/index.html): Services offer a way to provide programmatic, centrally-controlled, and consistent access controls for automated processes such as CI/CD pipelines and custom applications. (473 words)
- [Advanced Connector Management | Twingate](/content/docs/advanced-connector-management/index.html): Connector logging, health checks, metadata, metrics, unqualified domain support, and deployment automation options. (246 words)
- [How to Upgrade Connectors Running in Kubernetes with Helm | Twingate](/content/docs/k8s-helm-chart-upgrades/index.html): Check running Connector versions, update the Helm chart, and upgrade the Connector image in Kubernetes pods. (184 words)
- [How to Deploy a Connector on Linux | Twingate](/content/docs/connectors-on-linux/index.html): Install and configure Connectors on Linux systems using Docker containers or systemd service deployment. (863 words)
- [Updating Connectors | Twingate](/content/docs/upgrading-connectors/index.html): Why to keep Connectors current, the minimum supported Connector version, update best practices, and platform-specific upgrade instructions for Docker, Helm, and systemd. (607 words)
- [How to Deploy a Connector on Azure | Twingate](/content/docs/azure/index.html): Deploy Connectors on Azure using Container Instances, virtual machines, AKS, or infrastructure-as-code tools. (861 words)
- [Firewall Failures | Twingate](/content/docs/firewall-failures/index.html): How to Troubleshoot Firewall Issues (523 words)
- [Privileged Access for Web Apps Overview | Twingate](/content/docs/web-app-access/index.html): Put an internal web app behind a Twingate Gateway and it injects a signed JWT into every request, giving your app user identity with no OIDC integration. (1,836 words)
- [Introduction to the Twingate Javascript CLI | Twingate](/content/docs/introduction-to-tg-cli-javascript/index.html): The Twingate Javascript CLI is a fully featured CLI tool utilising the Twingate GraphQL APIs. (679 words)
- [Client Application | Twingate](/content/docs/clients/index.html): Download links, installation methods, and update policies for the Twingate Client across macOS, Windows, Linux, iOS, and Android platforms. (545 words)
- [How NAT Traversal Works | Twingate](/content/docs/how-nat-traversal-works/index.html): The backbone of peer-to-peer traffic explained (2,920 words)
- [HIPAA Compliance | Twingate](/content/docs/hipaa-compliance/index.html): Twingate for companies requiring HIPAA compliance (100 words)
- [Deployment Automation | Twingate](/content/docs/deployment-semi-automation/index.html): Automate Connector deployment with Terraform, the Admin API, or manual token provisioning for infrastructure-as-code workflows. (477 words)
- [Filtering Analytics | Twingate](/content/docs/filtering-analytics/index.html): Review DNS filtering activity, including query and block counts, top domains, block reasons, and the recent activity log. (521 words)
- [Audit Logs Schema | Twingate](/content/docs/audit-logs-schema/index.html): JSON schema reference for audit log events, including actor details, actions, and target object definitions. (345 words)
- [Web App Middleware Developer Guides | Twingate](/content/docs/web-app-developer-guides/index.html): Drop-in middleware for verifying Twingate Identity Firewall JWTs in Express.js, Django, Next.js, and Next.js with Auth.js, using the same ES256 pattern. (198 words)
- [Customer Network | Twingate](/content/docs/customer-networks/index.html): Create and manage Customer Networks in the MSP Portal, including trial periods, plans, and deletion procedures. (510 words)
- [Cancel Your Subscription | Twingate](/content/docs/subscription-cancellation/index.html): Downgrade to the Starter plan to cancel automatic renewal at the end of your current subscription term. (74 words)
- [Devices | Twingate](/content/docs/devices/index.html): Practical overview for installing the Twingate Client and managing devices on your network. (152 words)
- [Publicly Exposed Resources in Kubernetes | Twingate](/content/docs/k8s-public-services/index.html): Control access to externally-exposed Kubernetes services by creating Resources with private IPs or DNS names instead of public endpoints. (170 words)
- [Detailed Network Event Schemas | Twingate](/content/docs/detailed-network-event-schema/index.html): CSV and JSON schema definitions for exported network events, including field descriptions and format examples. (535 words)
- [MSP Billing | Twingate](/content/docs/msp-billing/index.html): Consolidated monthly billing for MSPs, based on total users minus admins across all Customer Networks. (376 words)
- [Automated Deployment | Twingate](/content/docs/automated-quick-start/index.html): Get started by automating your deployment with Terraform or Pulumi. (70 words)
- [Case Study: Penfold | Twingate](/content/customers/penfold/index.html): A Scalable Zero Trust Solution that Supports Growth. (964 words)
- [Case Study: Homebase | Twingate](/content/customers/homebase/index.html): With Twingate, Homebase ensures their employees have secure performant access to development environments while completely eliminating public VPN gateways. (1,053 words)
- [Network Overview | Twingate](/content/docs/network-overview/index.html): Dashboard showing network insights, device and Resource counts, connection history, and recent activity across Remote Networks. (251 words)
- [Case Study: ConsumerAffairs | Twingate](/content/customers/consumeraffairs/index.html): Replacing their OpenVPN access solution with Twingate let ConsumerAffairs reduce maintenance frustrations, improve the user experience, and pave the way for stronger security practices. (1,040 words)
- [Introduction to DNS | Twingate](/content/docs/introduction-to-dns/index.html): This article is an introduction to the concepts and internal mechanics of DNS (or Domain Name Systems). (2,541 words)
- [Introduction to the Twingate Python CLI | Twingate](/content/docs/introduction-to-the-python-cli/index.html): The Twingate Python CLI is a fully featured CLI tool utilising the Twingate GraphQL APIs. (1,172 words)
- [SentinelOne Configuration | Twingate](/content/docs/sentinelone-configuration/index.html): Connect SentinelOne to Twingate to verify managed macOS and Windows devices and enforce EDR verification in Security Policies. (630 words)
- [Case Study: Hi-Rez Ventures | Twingate](/content/customers/hi-rez/index.html): Hi-Rez uses Twingate to supercharge remote access performance and upgrade security, allowing users to more easily work with sensitive assets in a demanding, bandwidth-intensive environment. (1,030 words)
- [User Activity | Twingate](/content/docs/user-activity/index.html): Export authentication events, active user reports, and inactive user lists with connection stats and timestamps. (806 words)
- [Groups | Twingate](/content/docs/groups/index.html): Control Resource access by adding users to Groups, which can be created manually or synced from your identity provider. (344 words)
- [Getting Started with the API | Twingate](/content/docs/getting-started-with-the-api/index.html): Generate an API key and make your first GraphQL query using Postman or Altair to retrieve Resources from your account. (732 words)
- [Connector Details | Twingate](/content/docs/connector-details/index.html): Connector metadata reported to the Admin Console: uptime, time offset, STUN status, hostname, and IP addresses. (401 words)
- [Exploring the APIs | Twingate](/content/docs/exploring-the-apis/index.html): Video tutorials for using Twingate's GraphQL API with Postman, including queries, nested data, mutations, and introspection. (349 words)
- [PCI Compliance | Twingate](/content/docs/pci-compliance/index.html): Twingate for companies requiring PCI compliance (403 words)
- [Kubernetes Kubeconfig Sync | Twingate](/content/docs/kubernetes-kubeconfig-sync/index.html): Use twingate kube config sync to write kubeconfig contexts for every Kubernetes Resource you can access, without gcloud, doctl, or aws eks credentials. (802 words)
- [Device Administration | Twingate](/content/docs/managing-devices/index.html): View device attributes, manage device states (active, archived, blocked), and configure device verification through EDR and MDM integrations. (552 words)
- [Device Failures | Twingate](/content/docs/device-failures/index.html): How to Troubleshoot User Device Issues (567 words)
- [Managed Service Providers | Twingate](/content/docs/msp/index.html): For managed service providers (MSPs), Twingate provides a multi-tenant portal that allows you to manage your Customer Networks and billing. (428 words)
- [Private Resources in Kubernetes | Twingate](/content/docs/k8s-private-services/index.html): Deploy Connectors via Helm inside a cluster and create Resources to access internal Kubernetes services by IP or DNS name. (123 words)
- [Windows Headless Mode | Twingate](/content/docs/windows-headless/index.html): Install and manage the Twingate Client on Windows servers using Service Keys and Windows Services for unattended operation. (547 words)
- [Windows Client Migration to .NET 8 | Twingate](/content/docs/windows-client-dotnet-8/index.html): The Windows Client is moving to .NET 8 in November 2024. (495 words)
- [Architecture Diagram | Twingate](/content/resources/architecture-diagram/index.html): Identity-based access for users, services, and AI agents that deploys in minutes, scales to every resource, and finally lets you retire your VPN. (171 words)
- [Managed Devices | Twingate](/content/docs/managed-devices/index.html): Deploy Twingate on managed devices using MDM solutions for Windows, macOS, and iOS platforms. (157 words)
- [Connector Metadata | Twingate](/content/docs/connector-metadata/index.html): Add custom metadata to Connectors as key-value pairs during deployment for tracking environment, location, or other labels. (418 words)
- [Authentication | Twingate](/content/docs/authentication/index.html): How re-authentication frequency works in Resource Policies and Minimum Authentication Requirements, including session lifetime interactions. (216 words)
- [Case Study: Zappi | Twingate](/content/customers/zappi/index.html): Zappi’s mobile-first, cloud-first workforce helps brands discover meaningful consumer insights that enhance marketing campaigns and product development. The need for ISO 27001 compliance drove a requirement for centralized access controls. Twingate’s quick time to value let Zappi unify its private and public cloud infrastructure in a secure, Zero Trust solution. (1,101 words)
- [How to Upgrade Connectors on Linux (systemd) | Twingate](/content/docs/systemd-service/index.html): Upgrade systemd-deployed Connectors on Ubuntu, Fedora, and CentOS with manual or automated update methods. (578 words)
- [Twingate vs. VPNs | Twingate](/content/docs/twingate-vs-vpn/index.html): Let's explore the differences between Twingate and typical VPN products (2,854 words)
- [Connector Health Checks | Twingate](/content/docs/connector-health-checks/index.html): Check if the Connector service is running correctly with built-in health checks for Docker, systemd, and container environments. (232 words)
- [Case Study: H2O.ai | Twingate](/content/customers/h2o/index.html): Twingate powers secure, infrastructure-as-code access for H2O.ai’s global teams, so they can focus on accelerating AI development without compromising security or control. (1,314 words)
- [GDPR Compliance | Twingate](/content/docs/gdpr-compliance/index.html): Twingate's GDPR compliance program, data processing addendum, Standard Contractual Clauses, and UK IDTA support. (318 words)
- [DORA Compliance | Twingate](/content/docs/dora-compliance/index.html): DORA Addendum availability for Business and Enterprise customers regulated by the Digital Operational Resilience Act. (82 words)
- [Deploying Connectors | Twingate](/content/docs/connector-deployment/index.html): Read this guide if you need help selecting the best Connector deployment method for your target environment. (585 words)
- [Identity Firewall Overview | Twingate](/content/docs/identity-firewall/index.html): Twingate Identity Firewall extends Zero Trust and privileged access controls to every user, resource, and agent, supporting Kubernetes, SSH, and web apps. (291 words)
- [Understanding Connectors | Twingate](/content/docs/understanding-connectors/index.html): How Connectors differ from VPN gateways and function as software-defined proxies within your network architecture. (569 words)
- [Compliance | Twingate](/content/docs/compliance-use-case/index.html): Twingate helps companies to implement security controls required by compliance programs and regulatory regimes such as CPRA, GDPR, PCI DSS, and SOC 2. (544 words)
- [Connectors | Twingate](/content/docs/connectors/index.html): Articles covering practical usage of our Connectors. (282 words)
- [Keycloak Configuration | Twingate](/content/docs/keycloak-configuration/index.html): Integrate Keycloak for user authentication using OpenID Connect protocol. Contact support for setup assistance. (89 words)
- [Responsible Disclosure Policy | Twingate](/content/docs/responsible-disclosure-policy/index.html): How to report security vulnerabilities, disclosure rules for researchers, out-of-scope systems, and contact information. (564 words)
- [AWS ECS with Twingate (Headless & Userspace) | Twingate](/content/docs/aws-ecs-headless-configurations/index.html): Secure private access for ECS workloads using Service Accounts (970 words)
- [How to Offboard Users | Twingate](/content/docs/offboarding-users/index.html): Best Practices for Offboarding Users from Twingate (473 words)
- [Device Report | Twingate](/content/docs/device-report/index.html): Generate CSV reports of all devices with Client version, owner info, OS platform, and last access timestamps. (386 words)
- [Social Logins | Twingate](/content/docs/social-logins/index.html): Using social identities to log in to Twingate (310 words)
- [How to Upgrade Containerized Connectors (AWS/Azure/Docker) | Twingate](/content/docs/docker/index.html): Update Connectors running in Docker, AWS ECS, or Azure Container Instances with platform-specific upgrade procedures. (845 words)
- [Connector Best Practices | Twingate](/content/docs/connector-best-practices/index.html): Recommendations for deploying Connectors with redundancy, load balancing, network requirements, and hardware sizing. (1,144 words)
- [Admins | Twingate](/content/docs/admins/index.html): Assign admin roles with different permission levels and control who can edit settings in the Admin Console. (323 words)
- [How to Deploy a Connector on GCP | Twingate](/content/docs/gcp/index.html): Deploy Connectors on Google Cloud Platform using Compute Engine, GKE, or automated provisioning commands. (532 words)
- [How to Deploy a Connector on AWS | Twingate](/content/docs/aws/index.html): Step-by-step instructions for deploying Connectors on AWS using CloudFormation, EC2, AMI, ECS Fargate, or Kubernetes. (1,028 words)
- [How to Deploy a Connector with the K8s Helm Chart | Twingate](/content/docs/k8s-helm-chart/index.html): Install Connectors on Kubernetes clusters using the official Twingate Helm chart for GKE, EKS, and other platforms. (214 words)
- [Case Study: Jellyvision | Twingate](/content/customers/jellyvision/index.html): Jellyvision is an industry leader in employee benefits engagement, combining predictive analytics and behavioral science to make the benefits process a delightful experience. Twingate’s easy onboarding and Okta integration helped Jellyvision complete its transition from an on-premises VPN to Zero Trust. (1,281 words)
- [How to troubleshoot peer-to-peer connections | Twingate](/content/docs/troubleshooting-p2p/index.html): Solving issues with NAT traversal, in practice. (975 words)
- [Case Study: Kapiche | Twingate](/content/customers/kapiche/index.html): As a fast-paced startup, Kapiche needed an access control solution that worked without the overhead and vulnerabilities of a VPN. Here’s how Twingate fits the bill. (920 words)
- [Admin Console Export | Twingate](/content/docs/admin-console-export/index.html): Steps to generate and download audit log reports from the Admin Console in JSON format for offline analysis. (217 words)
- [How To Deploy A Connector On Aptible | Twingate](/content/docs/aptible/index.html): Learn how to deploy Connectors in Aptible's secure cloud environment. (596 words)
- [OneLogin Configuration | Twingate](/content/docs/onelogin-configuration/index.html): Connect OneLogin to Twingate for user authentication and SCIM-based user and group sync. (600 words)
- [How Twingate Works | Twingate](/content/docs/how-twingate-works/index.html): Architecture overview of the Controller, Client, Connector, and Relay, including their roles and how dual-ACL authorization works. (1,303 words)
- [Homelab & Personal Use Cases | Twingate](/content/docs/homelab-personal-use-case/index.html): Twingate enables secure, remote access to your home network and services like Home Assistant, Plex, security cameras, and other self-hosted apps.  (408 words)
- [Exit Networks | Twingate](/content/docs/exit-networks/index.html): Route all traffic through Twingate using Exit Networks. (1,127 words)
- [Internet Security Use Case | Twingate](/content/docs/internet-security-use-case/index.html): Twingate can secure public internet traffic on employee devices and protect your organization from online security threats in a variety of ways, including with DNS filtering and DNS-over-HTTPS. (230 words)
- [Application Gating | Twingate](/content/docs/ip-based-access-use-case/index.html): Twingate enables secure access to SaaS apps and private services where IP address-based access or whitelisting is required or supported. Common use cases include connecting to third-party services or apps that restrict access by IP address, securing staging servers, and deploying a lightweight cloud access security broker (CASB). (304 words)
- [DNS-over-HTTPS (DoH) | Twingate](/content/docs/dns-security/index.html): Encrypt all DNS traffic from the Twingate Client using DoH with public or custom resolvers and strict or automatic fallback. (919 words)
- [Infrastructure Access Use Case | Twingate](/content/docs/infra-access-use-case/index.html): Twingate enables engineers and DevOps to manage and automate secure access to technical infrastructure, both on-premises and in the cloud. (359 words)
- [AI Usage Overview | Twingate](/content/docs/ai-services/index.html): See which AI services are in use across your devices, based on DNS query data that DNS filtering already collects. (941 words)
- [VPN Replacement Use Case | Twingate](/content/docs/vpn-replacement-use-case/index.html): Twingate enables employees to remotely access the office network, cloud VPCs, and other private corporate resources from their computers and mobile devices. (421 words)
- [Encryption in Twingate | Twingate](/content/docs/how-encryption-works-in-twingate/index.html): How Twingate secures all communications between Client, Connector, Relays and Controller (1,531 words)
- [Database Access | Twingate](/content/docs/database-access-guide/index.html): Securely access your private and protected databases with Twingate. (1,346 words)
- [Policy Guides | Twingate](/content/docs/security-policy-guides/index.html): Directory of Security Policy rule guides for authentication frequency, 2FA, device-only policies, and Trusted Device requirements. (76 words)
- [FAQ | Twingate](/content/docs/faq/index.html): Frequently Asked Questions (1,653 words)
- [Home Labs | Twingate](/content/docs/homelabs-guide/index.html): Set up Twingate on your home lab to access self-hosted services from anywhere. (624 words)
- [October 22, 2026 Live Onboarding Session | Twingate](/content/onboarding/oct-22-26/index.html): Register for our upcoming live onboarding session on October 22, 2026 at 8 am PT / 11 am ET. (148 words)
- [Support | Twingate](/content/support/index.html): Need help with Twingate? We've got you covered. Explore our support options including docs, guides, and ticketed support. (130 words)
- [Download Twingate | Twingate](/content/download/index.html): Download the Twingate client to connect to your remote network. (72 words)
- [ChromeOS | Twingate](/content/docs/chromeos/index.html): Instructions for installing and setting up the Twingate Client on ChromeOS devices using Google Play. (246 words)
- [How Sessions Work | Twingate](/content/docs/how-sessions-work/index.html): How Twingate's authentication frequency controls work and how re-authentication is handled in practice. (1,200 words)
- [Connector Metrics Overview | Twingate](/content/docs/connector-metrics/index.html): Monitor Connector traffic, uptime, and resource counts with Prometheus-compatible metrics for operational visibility. (324 words)
- [Kubernetes Overview | Twingate](/content/docs/k8s/index.html): Kubernetes (K8s for short) is an open source system for automating deployment, scaling, and management of containerized applications. (277 words)
- [Analytics | Twingate](/content/docs/analytics/index.html): Twingate provides a number of different reports to help you understand both network-level and user activity within your account. (146 words)
- [Cloud Providers | Twingate](/content/docs/cloud-providers-guide/index.html): Deploy and configure Twingate across AWS, Azure, GCP, and DigitalOcean. (678 words)
- [CI/CD Configuration | Twingate](/content/docs/example-cicd-configurations/index.html): Add Twingate access to GitHub Actions and CircleCI pipelines with example configurations using the headless Client. (551 words)
- [Network Traffic | Twingate](/content/docs/exporting-network-traffic/index.html): View, filter, and export network activity that flows through Connectors via Admin Console, CSV, S3, or real-time logs. (375 words)
- [Device-only Policies | Twingate](/content/docs/device-only-resource-policies/index.html): Configure Resource Policies to check only device requirements without user re-authentication, while still enforcing Minimum Authentication validity. (370 words)
- [Do Not Sell or Share My Personal Information | Twingate](/content/privacy/optout/index.html): Twingate Privacy Policy: Do Not Sell or Share My Personal Information (398 words)
- [October 28, 2026 Live Onboarding Session | Twingate](/content/onboarding/oct-28-26/index.html): Register for our upcoming live onboarding session on October 28, 2026 at 11 am PT / 2 pm ET. (175 words)
- [API | Twingate](/content/docs/api-overview/index.html): GraphQL-based Admin API reference covering endpoints for managing Remote Networks, Connectors, Resources, Groups, and more. (715 words)
- [Events & Webinars | Twingate](/content/events-webinars/index.html): Connect with the Twingate team in person and online to learn about the future of zero trust. (474 words)
- [Changelog | Twingate](/content/changelog/index.html): See the latest updates across all of Twingate's platforms. (10,308 words)
- [Quick Start | Twingate](/content/docs/quick-start/index.html): Configure your Twingate network to protect and access your private Resources. (678 words)
- [Twingate Security Whitepaper | Twingate](/content/resources/twingate-security-whitepaper/index.html): Learn how Twingate keeps your data and infrastructure secure. This whitepaper details Twingate’s architecture, design, reliability, security practices, and more. (70 words)
- [Manually Verified Devices | Twingate](/content/docs/manually-verified-devices/index.html): Mark devices as trusted by uploading serial numbers or verifying specific device instances through the Admin Console or API. (308 words)
- [Native MFA | Twingate](/content/docs/two-factor-authentication/index.html): Twingate's native 2FA options (TOTP, biometrics, security keys), Security Policy configuration, and how session lifetime affects 2FA prompts. (437 words)
- [Location Requirements | Twingate](/content/docs/location-requirements/index.html): Restrict Resource access by country using allowlists or denylists. How location is determined via IP geolocation and configuration steps. (326 words)
- [CVE-2022-0168 Report - Details, Severity, & Advisories | Twingate](/content/blog/tips/cve-2022-0168/index.html): We will discuss what is CVE-2022-0168, if you are affected by it, what to do if you're affected by it, and more! (367 words)
- [Case Study: Appen | Twingate](/content/customers/appen/index.html): When a top-tier technology client needed airtight identity verification and app gating for thousands of remote contributors, Appen turned to Twingate to deliver it in a month, then expanded it across internal engineering and product teams worldwide. (1,709 words)
- [Linux Headless Mode | Twingate](/content/docs/linux-headless/index.html): Run the Twingate Client on Linux servers without a GUI using Service Keys, systemd, Docker, or Kubernetes sidecars. (1,764 words)
- [Case Study: Modern Health | Twingate](/content/customers/modern-health/index.html): By switching to Twingate, the fully remote team at Modern Health was able to implement least privilege access while improving productivity for the IT team, saving an estimated 250 hours. (986 words)
- [CVE-2023-46748 Report - Details, Severity, & Advisories | Twingate](/content/blog/tips/cve-2023-46748/index.html): We will discuss what is CVE-2023-46748, if you are affected by it, what to do if you're affected by it, and more! (373 words)
- [Rakuten Data Breach: What & How It Happened? | Twingate](/content/blog/tips/rakuten-data-breach/index.html): In this article, we will discuss the Rakuten Data Breach, how it happened, what info was leaked, and what to do if affected. (468 words)
- [Paychex Data Breach: What & How It Happened? | Twingate](/content/blog/tips/paychex-data-breach/index.html): In this article, we will discuss the Paychex Data Breach, how it happened, what info was leaked, and what to do if affected. (451 words)
- [Sound Generations Data Breach: What & How It Happened? | Twingate](/content/blog/tips/sound-generations-data-breach/index.html): In this article, we will discuss the Sound Generations Data Breach, how it happened, what info was leaked, and what to do if affected. (520 words)
- [Twingate GitOps: One OCI Artifact, 50 Clusters | Twingate](/content/blog/twingate-gitops/index.html): How Twingate ships infrastructure to 50 private Kubernetes clusters using one OCI artifact per commit and tag-based promotion. No rebuilds, fast reverts. (2,501 words)
- [Eliminate K8s API Exposure in Under 30 Minutes | Twingate](/content/blog/secure-k8s-api/index.html): Replace publicly exposed Kubernetes API endpoints and VPN-tunneled kubectl with identity-based access. (1,854 words)
- [Tampa General Hospital Data Breach: What & How It Happened? | Twingate](/content/blog/tips/tampa-general-hospital-data-breach/index.html): In this article, we will discuss the Tampa General Hospital Data Breach, how it happened, what info was leaked, and what to do if affected. (541 words)
- [Device Profiles | Twingate](/content/docs/device-security-guide/index.html): Define trusted devices using Approved Operating Systems and Trusted Profiles, then incorporate them into Security Policies. (893 words)
- [Blog | Twingate](/content/blog/index.html): The latest news, announcements, and other content, where we discuss Twingate, Zero Trust Network Access, and the future of network security. (301 words)
- [Twingate & the eMudhra Certificate Compromise | Twingate](/content/blog/emudhra-certificate-compromise/index.html): Identity-based access for users, services, and AI agents that deploys in minutes, scales to every resource, and finally lets you retire your VPN. (662 words)
- [NextDNS Integration | Twingate](/content/integrations/nextdns/index.html): Leverage Twingate’s DNS-over-HTTPS capability to provide DNS filtering and protection powered by NextDNS. (213 words)
- [Reviewing Access Requests | Twingate](/content/docs/resources-reviewing-access-requests/index.html): Which admin roles and Resource Approvers can review access requests, how to delegate approval authority, and where to review requests. (496 words)
- [Pulumi Integration | Twingate](/content/integrations/pulumi/index.html): Bring Zero Trust Network Access into your automated infrastructure configuration via Twingate’s Pulumi provider. (168 words)
- [Best Practices | Twingate](/content/docs/remote-network-best-practices/index.html): Best practices for Remote Network configuration including segmentation strategy, private DNS setup, routing independence, and firewall rules. (507 words)
- [JumpCloud Integration | Twingate](/content/integrations/jumpcloud/index.html): Synchronize user accounts and delegate authentication with Twingate and JumpCloud. (222 words)
- [Keycloak Integration | Twingate](/content/integrations/keycloak/index.html): Delegate user authentication to Keycloak via OIDC. (150 words)
- [OneLogin Integration | Twingate](/content/integrations/onelogin/index.html): Leverage OneLogin for authentication and user group synchronization via SCIM. (126 words)
- [Resource Policies | Twingate](/content/docs/resource-policies/index.html): Create and assign policies that control authentication, device, and location requirements for individual Resources. (1,083 words)
- [Architecture | Twingate](/content/docs/architecture/index.html): Twingate provides secure access to private resources for distributed workforces using a Zero Trust Networking model. (453 words)
- [Use Cases | Twingate](/content/docs/use-cases/index.html): Browse Twingate use cases from VPN replacement to homelab access, device security, infrastructure automation, and more. (393 words)
- [Best Zero Trust Access Solution | Twingate](/content/zero-trust/index.html): We make Zero Trust easy to deploy, simple to use, and powerful. Ditch your VPN and secure your business with a Zero Trust platform you’ll actually enjoy using. (258 words)
- [Google Workspace Integration | Twingate](/content/integrations/google-workspace/index.html): Connect your Google Workspace account for Single Sign-On (SSO) and user and group synchronization via SCIM provisioning. (154 words)
- [Device Posture Checks | Twingate](/content/docs/device-posture-checks/index.html): Platform-specific posture checks including encryption, firewall, screen lock, and minimum OS version requirements for all Twingate Clients. (374 words)
- [Okta Integration | Twingate](/content/integrations/okta/index.html): Bridge identity management and policy-based access controls with Twingate and Okta. (223 words)
- [Security Policies | Twingate](/content/docs/security-policies/index.html): Configure access requirements for your Twingate network using Resource Policies, the Sign In Policy, and Device Profiles. (974 words)
- [Sign In Policy | Twingate](/content/docs/sign-in-policy/index.html): Configure the baseline requirements for signing in to the Twingate Client. (552 words)
- [Microsoft Azure  Integration | Twingate](/content/integrations/azure/index.html): Provide secure Zero Trust remote access to your Azure VNets and other Microsoft-managed resources. (160 words)
- [Jamf Integration | Twingate](/content/integrations/jamf/index.html): Configure Twingate Security Policies so that only Jamf-verified devices can sign into Twingate or access protected Resources. (214 words)
- [Privacy Policy | Twingate](/content/privacy/index.html): The official Twingate Privacy Policy (3,982 words)
- [Users | Twingate](/content/docs/users/index.html): Manage user accounts through social logins or synced identity providers, and control Resource access with Groups. (482 words)
- [October 14, 2026 Live Onboarding Session | Twingate](/content/onboarding/oct-14-26/index.html): Register for our upcoming live onboarding session on October 14, 2026 at 11 am PT / 2 pm ET. (191 words)
- [Kandji Integration | Twingate](/content/integrations/kandji/index.html): Add a layer of security to policy-based access controls with device posture checks from Kandji. (208 words)
- [Userspace Networking | Twingate](/content/docs/linux-userspace-networking/index.html): Run Twingate without root privileges using HTTP Proxy Mode (906 words)
- [CrowdStrike Integration | Twingate](/content/integrations/crowdstrike/index.html): Leverage CrowdStrike to enforce device restrictions and posture checks with Twingate. (263 words)
- [Microsoft Intune Integration | Twingate](/content/integrations/microsoft-intune/index.html): Leverage Microsoft Intune data for trusted device Security Policies in Twingate. (220 words)
- [Customer Love | Twingate](/content/customers/love/index.html): See what people around the globe are saying about Twingate! Read real-world testimonials from Twingate users securing everything from their homelab to the most innovative companies across the world. (2,111 words)
- [Integrations | Twingate](/content/integrations/index.html): Create a best-in-class Zero Trust security stack with Twingate integrations, including major IdPs, MDM/EDRs, SIEMs, DOH providers, and more. (653 words)
- [Manage Kubernetes using kubectl | Twingate](/content/docs/k8s-kubectl/index.html): Use kubectl to manage a Kubernetes cluster through Twingate by creating a Resource for the private API endpoint. (251 words)
- [Customer Agreement | Twingate](/content/terms/index.html): The official Twingate Customer Agreement (913 words)
- [Careers | Twingate](/content/careers/index.html): We're building a team that brings diverse talent together to create security solutions that people love to use. See where you might fit in our mission. (213 words)
- [Case Study: Kooapps | Twingate](/content/customers/kooapps/index.html): Kooapps uses Twingate to provide a better, more productive online experience for its global workforce, to simplify the administration of its remote access infrastructure, and to benefit from a modern, more secure Zero Trust architecture. (1,368 words)
- [Getting Started with Terraform and Twingate | Twingate](/content/docs/terraform-getting-started/index.html): Terraform (from HashiCorp) is a well known Infrastructure as Code platform that can be used to automate entire Twingate environments. (269 words)
- [Evaluating Twingate Performance | Twingate](/content/docs/twingate-performance/index.html): Performance testing Twingate against VPN technologies. (1,698 words)
- [Resource Tags | Twingate](/content/docs/tags/index.html): Organize your Network using tags. (838 words)
- [Case Study: Blend | Twingate](/content/customers/blend/index.html): Leveraging Twingate and Opal, Blend was able to streamline employee access requests as they implemented a bold and strategic vision to re-imagine employee access. (902 words)
- [Resource Exclusion | Twingate](/content/docs/exclusion/index.html): Set addresses to bypass Twingate. (594 words)
- [Iru Configuration | Twingate](/content/docs/iru-configuration/index.html): Integrating Iru (previously Kandji) with Twingate to verify macOS devices and enforce requirements for managed device access. (694 words)
- [CrowdStrike Configuration | Twingate](/content/docs/crowdstrike-configuration/index.html): Configure the CrowdStrike Falcon integration to verify devices via Zero Trust Assessment and enforce security policies in Twingate. (647 words)
- [macOS standalone Client | Twingate](/content/docs/macos-standalone-client/index.html): Install the Twingate standalone macOS Client via PKG installer, including system extension setup and MDM distribution options. (543 words)
- [Service Reliability | Twingate](/content/docs/service-reliability/index.html): Twingate's infrastructure architecture, availability measures, fault tolerance, performance optimization, and scalability design. (619 words)
- [Case Study: MHC Software | Twingate](/content/customers/mhc-software/index.html): Leveraging Twingate, MHC supports 200+ globally distributed employees to access the information they need, while minimizing their attack surface across multiple cloud and on-prem environments. (955 words)
- [JIT Access Requests | Twingate](/content/docs/jit-access-requests/index.html): Configure just-in-time access workflows with auto-approval or manual review. User request flow, access period options, and tracking capabilities. (413 words)
- [Content Filtering | Twingate](/content/use-case/content-filtering/index.html): Proactively block access to inappropriate or unwanted web-based content at the DNS level with Twingate Internet Security. (247 words)
- [DNS Filtering | Twingate](/content/use-case/dns-filtering/index.html): Automatically flag, detect, and block malicious web threats with Twingate DNS Filtering. (221 words)
- [Device Security Controls Use Case | Twingate](/content/docs/device-controls-use-case/index.html): Twingate enables organizations to precisely control what types of devices are allowed to access protected corporate resources. With Twingate, fine-grained access policies can be established that screen users and devices against sets of permitted device characteristics, such as operating system type, whether screen lock is enabled, whether MDM or EDR is enabled, and more. (320 words)
- [Usage-based Auto-lock | Twingate](/content/docs/usage-based-auto-lock/index.html): Automatically lock out users who haven't accessed a Resource within a set period. Configuration options, approval methods, and how to unlock access. (672 words)
- [Guides | Twingate](/content/docs/guides/index.html): How to deploy, configure, and manage Twingate in a wide range of contexts. (576 words)
- [Ephemeral Access | Twingate](/content/docs/ephemeral-access-to-resources/index.html): Grant time-limited Group access to Resources with automatic expiration. How to set expiration dates and common use cases like contractor access. (329 words)
- [Aliases | Twingate](/content/docs/resource-aliases/index.html): Add convenient addresses to access your Resources. (422 words)
- [SOC 2 Report | Twingate](/content/docs/soc-2/index.html): What SOC reports are, how SOC 2 Type 2 audits work, and how to request Twingate's SOC 2 report. (192 words)
- [signup/index.html](/content/signup/index.html) (31 words)
- [Securing the fastest growing companies in the world](/content/customers/index.html): See how the most innovative companies use Twingate to eliminate legacy VPNs and move towards Zero Trust Security. (389 words)
- [MSP | Twingate](/content/msp/index.html): It’s time to break up with your VPN. Give your customers modern ZTNA without modern complexity with the Twingate MSP Portal. (372 words)
- [VPN Replacement | Twingate](/content/use-case/vpn-replacement/index.html): It's time to replace your VPN. Twingate's Zero Trust Network Access platform provides high performance, secure access to modern infrastructure across all environments. (424 words)
- [Supercharge your security. Start free.](/content/pricing/index.html): Choose the Twingate plan that meets your needs. (680 words)
- [Home | Twingate](/content/docs/index.html): Learn how to secure everything from staging environments to SaaS apps with Zero Trust principles that are easy to use and administer. (151 words)
- [Live Onboarding Sessions | Twingate](/content/onboarding/index.html): New to Twingate? We've got you covered. Join a live onboarding session hosted by the Twingate team to learn tips, tricks, and best practices for deploying Twingate. (97 words)
- [Partners | Twingate](/content/partners/index.html): Discover how Twingate can help your customers transition to a secure, usable and performant Zero Trust Access solution. (103 words)
- [Attend a Demo Session | Twingate](/content/demo/index.html): Speak to a Twingate expert and learn how we can help your organization secure its network resources.
 (77 words)

## Products

- [Identity Firewall | Twingate](/content/product/identity-firewall/index.html): Replace static SSH keys, kubeconfigs, and standing admin with short‑lived, audited access, all without changing how your engineers work. (723 words)
- [Least Privilege Automation | Twingate](/content/product/least-privilege-automation/index.html): Automate granular access controls across your entire organization with Twingate. (837 words)
- [Zero Trust Network Access | Twingate](/content/product/ztna/index.html): Twingate retires VPNs, jump hosts, and IP allowlists. Every connection is bound to a verified identity, scoped to a single resource, and torn down the moment it shouldn't exist, with nothing exposed to the public internet. (1,026 words)

## About Pages

- [About | Twingate](/content/about/index.html): Twingate helps organizations secure and manage access to their resources in a world where people work from anywhere. (260 words)
- [Team | Twingate](/content/docs/team/index.html): Manage your network's Users, configure Groups, and integrate with an Identity Provider. (116 words)

## Resources

- [Full Page Index](/index.html): Browse all cached pages with rich metadata
- [About This Cache](/about.html): Methodology, technical details, and usage guidelines
- [XML Sitemap](/sitemap.xml): Machine-readable sitemap for crawler discovery
- [Robots.txt](/robots.txt): Crawler directives
- [Agentsite Network](https://agentsite.network/network.html): Public index of Agentsites and their machine-readable resources