FireTun is a zero trust network access (ZTNA) and identity & device zero touch provisioning (RZTP) platform. It connects your users to corporate resources securely, verifying at every step who they are, which device they are connecting from, and under what conditions.
Traditional VPNs grant full network access once the user is connected. ZTNA flips that model: no one enters just because they are logged in. Every access to every application is explicitly authorized, after verifying identity, device state and context. If something doesn't add up, the request is denied.
Every user is validated at all times. Identity integrates with your provider (Keycloak, Google, Microsoft) and every access request is evaluated against the user's current state and the state of their device.
Before granting access to an application we evaluate the device state: up-to-date operating system, active antivirus, disk encryption, absence of disallowed tools. If the device doesn't comply, access is restricted or the device is sent to quarantine.
The user only sees the applications and services they are entitled to. No flat network, no lateral movement: every policy describes who can reach what, over which protocol and under which conditions.
Every connection, every attempt, every policy change is recorded. You know exactly who accessed what, when and from where. Meets the traceability requirements of GDPR and Chile's Law 21.719.
RZTP complements ZTNA: it ensures that users and devices reach the platform with a verified identity from the very first minute. Nothing is configured by hand, nothing is shared via email. Everything flows from your corporate directory and every device is registered in a unique, verifiable and revocable way.
A new teammate receives a link, installs the agent and is connected in seconds with their corporate identity. No manual configuration, no shared keys, no installation manuals.
The platform consumes users and groups from your identity provider. When someone changes role or leaves the company, their access adjusts automatically within minutes.
Every connected device is registered with its fingerprint, operating system and compliance state. You have real-time visibility into which devices are up, which are outdated and which were revoked.
Visual design, granular policies and modern encryption in a single multi-tenant platform.
Design your network as a map: drag users, resources and policies. The technical configuration is generated automatically.
Based on WireGuard, with automatic key rotation and customer isolation through independent encryption keys.
Define who can reach what. Every policy can restrict protocol, port, schedule and device posture.