{"rid":"egress/twingate","card":{"rid":"egress/twingate","eid":"twingate","topic":"egress","slug":"twingate","provider":"Twingate","url":"https://www.twingate.com/pricing","domain":"twingate.com","category":"zero trust access (private only)","tier":"free","verdict":"fails-egress","vorder":5,"grp":"rejected","confidence":"documented","binding":"request-rate","identity_kind":"email","identity_basis":"stated","needs_card":0,"needs_phone":0,"needs_id":0,"needs_institution":0,"country":null,"crypto":null,"interfaces":"cli","egress_metered":0,"per_object_bytes":null,"retention_days":null,"verified_at":"2026-10-23T00:00:00.000Z","verified_basis":"live","checked_on":"2026-10-23","stale_on":"2026-11-22","n_evidence":2,"usd_month":null,"usd_per_tb_month":null,"summary":"Starter: 'Free per user / month', 'Up to 5 users'.","duplicate_of":null,"n_unknown":2},"record":{"topic":"egress","slug":"twingate","provider":"Twingate","url":"https://www.twingate.com/pricing","category":"zero trust access (private only)","tier":"free","free_tier":{"stated":"Starter: 'Free per user / month', 'Up to 5 users'.","unit":"users","metered_on":"identity-count","source_url":"https://www.twingate.com/pricing","read_on":"2026-10-23","notes":""},"per_object_cap":{"stated":"not applicable","bytes":null,"source_url":"https://www.twingate.com/pricing","notes":""},"retention":{"stated":"not applicable","days":null,"source_url":"https://www.twingate.com/pricing","notes":""},"egress":{"terms":"No byte allowance is published; the plan is priced per user.; ingress: none","metered":false,"free_allowance":"none published","price_per_tb":null,"source_url":"https://www.twingate.com/pricing"},"interface":["cli"],"interface_detail":"the Twingate client on each device and the Connector in the private network","tooling":"Twingate client and Connector","chaining":"carries nothing on its own; it is a private access layer, so it composes with a public ingress rather than replacing one","limits":[{"kind":"request-rate","value":"The only published meter is the 5-user cap, and the vocabulary has no token for an identity count; request-rate is the nearest. It is also moot: with no public ingress there is no 1 TiB/month to spend.","source":"https://www.twingate.com/pricing"}],"limits_note":"","binding":"request-rate","binding_note":"The only published meter is the 5-user cap, and the vocabulary has no token for an identity count; request-rate is the nearest. It is also moot: with no public ingress there is no 1 TiB/month to spend.","identity_cost":{"kind":"email","detail":"a Twingate account at auth.twingate.com","country":"None"},"reliability_note":"Relays carry traffic only when peer-to-peer fails, and the free plan is bounded by users rather than bytes","confidence":"documented","confidence_note":"A live attempt to reach a Resource without the Twingate client would confirm the private-only claim.","evidence":[{"url":"https://www.twingate.com/pricing","date":"2026-10-23","proved":"Starter is 'Free per user / month' with 'Up to 5 users'"},{"url":"https://www.twingate.com/docs/how-twingate-works","date":"2026-10-23","proved":"'The Connector is intended to be deployed behind the firewall of a private Remote network'; the client-to-connector path is a 'certificate-pinned TLS tunnel'"}],"verdict":"fails-egress","verified_at":"2026-10-23T00:00:00.000Z","price_per_tb_month":"USD 0","notes":"Fails the ingress test by design: every path needs a Twingate client and an ACL issued by the Controller. The Connector does proxy 'TCP and UDP traffic for protected Resources', which is why UDP appears in the product and still carries nothing to a public reader.","extras":{"wg_path":"none","wg_detail":"No WireGuard. 'The Client is responsible for establishing an encrypted tunnel with the appropriate Connector to access a protected Resource. This TLS tunnel is established based on the anonymous, unique Connector ID'. No .conf exists.","ingress":"none","volume_tib_month":null,"volume_stated":"No byte allowance is published; the plan is priced per user.","bytes_transit":"unknown","transit_note":"peer-to-peer between client and Connector where possible, with a Relay as backup"}},"claims":[{"path":"$.free_tier.stated","kind":"free-quota","num":null,"unit":null,"per":null,"currency":null,"usd":null,"fx_date":null,"parse":"unparsed"},{"path":"$.limits[0].value","kind":"limit:request-rate","num":1,"unit":"TiB","per":"month","currency":null,"usd":null,"fx_date":null,"parse":"ok"},{"path":"$.price_per_tb_month","kind":"price-per-tb","num":0,"unit":"TB","per":"month","currency":"USD","usd":0,"fx_date":null,"parse":"ok"}],"unknown":[["$.per_object_cap.stated","not-applicable"],["$.retention.stated","not-applicable"]],"history":[],"drift":[]}