Polfence secures access to your apps, sites and devices by identity, not network location. Zero Trust access, secure connectivity, DNS filtering with Shield, remote desktop and managed DNS on one platform, with the audit trail and NIS2 report your compliance team asks for. EU-hosted, GDPR-first, EU-owned.
$polfence access grafana.internal✓identityalice@acme.eu · OIDC✓devicemanaged · disk encrypted✓policyengineering → grafana allow→ connected eu-fra · 0 inbound ports · WireGuard
Built on open standards, and the gear you already run
Start with Zero Trust access, then add connectivity, DNS filtering, remote desktop, DNS and monitoring. One login, one bill, one jurisdiction.
Access to internal apps by who someone is and what device they are on, never by being on the network. Device posture, just-in-time grants, no inbound ports.
Link sites, servers and devices into one private, obfuscated network. Site-to-site over your routers with plain WireGuard, or per device with the Polfence app.
Block malware, phishing, ads and trackers at the DNS layer over DoH. EU upstream, per-profile logs that stay in the EU.
Control any of your machines from the browser or desktop app. Consent-gated, end-to-end encrypted, multi-monitor.
Dynamic hostnames over dyndns2 and full zones on EU nameservers with a live database read and an emergency kill switch.
HTTP, TCP and DNS checks from EU probes, alerts by email or webhook, and a public status page with a badge.
The big network platforms are excellent, and American. For European companies that means data crossing the Atlantic and a compliance story you can never fully close. Polfence gives you the same Zero Trust building blocks, run entirely under EU law.
Hosted in Paris and Amsterdam. Traffic and metadata never leave European jurisdiction.
Built to the regulation, not bolted on afterwards: data minimisation, EU processing, a DPA in the dashboard.
No US parent, no CLOUD Act reach, no Schrems II grey area. A vendor your compliance team can sign off.
A WireGuard-based core and standard WebRTC, no secret in-house protocol. Security you can actually verify.
Sign-ins, tunnels, DNS queries, remote sessions, grants and monitors are correlated in one place instead of six logs.
Monitor, assist or autonomous. Automatic actions are limited to the ones you allow, logged, and reversible with one click.
Each finding carries its evidence and an EU-hosted AI summary of what happened and what to do. Never a black box.
Every sign-in, grant, policy change and device event is recorded, exportable as CSV or streamed to your SIEM.
Access per app, device checks before admission, and time-boxed grants instead of standing access.
An Article 21 self-assessment and a report your auditor or management board can file.
Replace the always-on, all-or-nothing VPN with access scoped to identity, device and app.
Install a lightweight connector next to your apps, or import a config into your router. It dials out. Nothing is exposed inbound.
polfence connect ./app.yamlEvery request is checked against identity and device posture. No implicit trust from being inside the network.
identity + device → policyPeople reach exactly the apps their policy allows, over an encrypted tunnel, from anywhere, on any network.
engineering → grafana allowHostnames, zones, networks, monitors, Shield profiles and audit events over HTTPS with scoped keys.
API reference →HMAC-SHA256 over every delivery. Slack, Teams or plain JSON to any endpoint.
Integrations →A machine-readable description of the whole API for generating clients or importing into your tooling.
Download the spec →A live SVG badge for any monitor or status page, for your README or customer portal.
Uptime Monitors →One price per account, not per user. Prices exclude VAT. Talk to us when compliance and scale matter.
Home labs, personal projects and a first look.
Freelancers and small setups that need more of everything.
Teams replacing the VPN with Zero Trust access.
Compliance, scale and a DPA your legal team will sign.
Every plan includes Polfence Connect remote desktop, authoritative DNS and EU-only processing. Cancel any time.
Start free in under a minute, or book a demo and we will map your apps to a Zero Trust rollout.
No credit card · Free tier forever