Air-traffic control for your Headscale tailnet — nodes, ACLs, routes, DNS, and a full audit trail, in one clean UI.
A birds-eye view of your network — online/offline/expired counts, exit nodes, subnet routers, expiring keys, and a live activity feed.
Every mutating action recorded with actor, target, and before/after detail — gated behind a dedicated read-audit capability.
Ask 'can A reach B?' and evaluate it against your live policy, with an edited-vs-saved preview diff before you commit.
A pending-advertisement approval inbox plus a visual auto-approvers editor so matching routes self-approve.
Bring your own auth via OpenID Connect — Google Workspace, Azure/Entra, Okta, Authentik, and any OIDC provider.
Open a terminal to your Tailscale nodes straight from the web UI via Tailscale SSH — no local client required.