Skip to content

Company

Tailscale

Networking company whose WireGuard-based mesh VPN connects an organisation's machines, servers and services into one private network.

Known aliases

  • controlplane.tailscale.com
  • tailnet
  • tailscale.com
  • tailscaled
  • Tailscale peer-to-peer VPN
  • Tailscale SSH
  • Tailscale VPN
  • tskey-

Current stories

buildOne report1 publisher

Tailscale's install script exits on Ubuntu 26.10 because its apt repo has no stonking directory

Tailscale's apt repo returns 404 for Ubuntu 26.10 ('stonking'), so the standard install script refuses to run on a fresh server. A DEV Community author reports the 26.04 ('resolute') repo works as a stopgap.

Publishers:dev.to

Reality

Evidence68
Adoption
Not scored
Hype gap−5
Incentives
Not scored
Confidence66
investConfirmed6 publishers

Andreessen Horowitz puts $38 million behind doxx.net's server-free networks for AI agents

Andreessen Horowitz led a $38 million Series A for doxx.net, a Miami startup building private networks for AI agents. The cash funds an open beta resting on one disclosed metric, the company's own count of more than 38 million potential threats blocked.

Perspective Coverage

6 publishers
Builder
Builder 35%
Operator
Operator 30%
Investor
Investor 35%

Reality

Evidence45
Adoption12
Hype gap+40
Incentives75
Confidence60
securityOne report1 publisher

Kothamine RAT tunnels its commands through Tailscale's tailcat

Malwarebytes found Kothamine, an undocumented Windows RAT hidden in malicious npm packages, that takes its 30-plus commands over Tailscale's tailcat. The encrypted channel leaves no command-and-control domain to block, pushing detection onto the endpoint.

Publishers:malwarebytes.com

Reality

Evidence60
Adoption
Not scored
Hype gap+5
Incentives
Not scored
Confidence58
investOne report1 publisher

Tailscale doubles its business customers to 40,000 since last November

The Toronto connectivity company's monthly active users have doubled to 2.5 million alongside those accounts, and the enthusiasm coming from Silicon Valley builders has no public revenue, valuation or funding figure to test it against.

Publishers:betakit.com

Reality

Evidence42
Adoption68
Hype gap+24
Incentives58
Confidence45
buildOne report1 publisher

Tailscale's default 180-day key expiry ended with the resolver's boot volume on another VM

One Oracle micro VM held Pi-hole, the exit node and the tailnet's only resolver. When its node key came due at 180 days, both clients lost name resolution and every admin path into the box was already closed.

Publishers:dev.to

Reality

Evidence62
Adoption14
Hype gap−8
Incentives25
Confidence58
buildOne report1 publisher

A feature gate in Codex build 9922 hides a cloud runner that drafts its own environment

RuntimeWire's comparison of two shipped Codex desktop builds found a second cloud path whose new environments start at package-manager network access, then take on Tailscale keys, proxy-delivered secrets and OIDC cloud identities.

Publishers:runtimewire.com

Reality

Evidence62
Adoption8
Hype gap+9
Incentives35
Confidence58
productOne report1 publisher

Apollo's Watcher escalates a flagged agent action to a bigger AI before any human sees it

The independent review of the Hugging Face incident needed AI to read its own evidence, and the startups selling AI monitors are building on that premise. Simon Willison says a watched model can try to fool its watcher.

Publishers:techcrunch.com

Reality

Evidence55
Adoption35
Hype gap+25
Incentives80
Confidence55
productOne report1 publisher

Security practitioners put logging and permissions ahead of Amodei's audit plan

Every agent break-out in TechCrunch's account surfaced through a victim or through network traffic, and the security practitioners it quoted want the labs to turn on logs, permissions and session expiry before hiring outside verifiers.

Publishers:techcrunch.com

Reality

Evidence55
Adoption30
Hype gap+18
Incentives72
Confidence50
productOne report1 publisher

Nvidia's PAIR spreads one agent's model calls across whichever home PCs are idle

Nvidia's Apache 2.0 beta seizes the port Ollama or LM Studio was using and forwards each call to whichever machine is free, which makes local throughput a function of how many PCs you own. Hands-on testing found it serving an engine Nvidia does not list.

Reality

Evidence55
Adoption15
Hype gap+10
Incentives62
Confidence48
buildOne report1 publisher

Tailcat prices Tailscale's control plane by removing it

The open-source data plane does encryption and NAT traversal in userspace with no root and no TUN device, and it stops exactly where identity, policy and reliable relays begin. That boundary is now the buy decision.

Publishers:runtimewire.com

Reality

Evidence55
Adoption15
Hype gap+18
Incentives78
Confidence52
buildOne report1 publisher

After closing port 22, disable Tailscale's 180-day key expiry to avoid server lockout

Putting sshd on a WireGuard tailnet and deleting the public firewall rule is a twenty-minute change. The part worth reviewing is the admin-console toggle that keeps a headless box from logging itself out.

Publishers:dev.to

Reality

Evidence46
Adoption
Not scored
Hype gap+8
Incentives34
Confidence52
buildOne report1 publisher

Enabling CloudFront VPC Origins deleted the emergency reroute a public origin kept

AWS traced the July 16 CloudFront failure to a capacity limit in one Frankfurt availability zone. The customers it knocked offline had adopted the feature that failed as a security control, not a routing one.

Publishers:dev.to

Reality

Evidence42
Adoption58
Hype gap+12
Incentives55
Confidence40
buildOne report1 publisher

iOS has nowhere to put a proxy setting, so the proxy moves into the network

A Tailscale App Connector fronting a sing-box TUN turns plain TCP into SOCKS5 for any tailnet device. The steering is longest-prefix match, and it fails without complaining.

Publishers:dev.to

Reality

Evidence58
Adoption10
Hype gap−8
Incentives22
Confidence45
buildOne report1 publisher

Tailscale's 19 corrupt SQLite files show single-writer discipline is not corruption detection

Tailscale logged 19 corrupted shard databases in six months, and the first alarm came from a pipeline reading its S3 backups. Using SQLite correctly did not bound the failure.

Publishers:tailscale.com

Reality

Evidence66
Adoption58
Hype gap+14
Incentives78
Confidence62
buildOne report1 publisher

A VPN server that hosted its own iDRAC turned a failed reboot into a 500km problem

A healthcare admin lost every route to the controller he needed, then got back in through an endpoint agent nobody had designated as management. The lesson is failure domains, not Tailscale.

Publishers:dev.to

Reality

Evidence20
Adoption10
Hype gap+35
Incentives35
Confidence32
buildOne report1 publisher

Firecracker won't run on a Mac, so Encore rebuilt the Linux image toolchain to match

Encore's crackling drives Firecracker on Linux and Apple's hypervisor on macOS. Getting one set of images to boot on both meant re-implementing much of what Docker and a Linux host do for free.

Publishers:encore.dev

Reality

Evidence56
Adoption30
Hype gap+12
Incentives68
Confidence60
buildOne report1 publisher

A redaction placeholder became a primary key, and it closed other people's promises

One catch-all regex rewrote long task slugs to TOKEN_REDACTED, a ledger keyed accounts on that constant, and a single done line marked two owners' work finished.

Publishers:dev.to

Reality

Evidence58
Adoption
Not scored
Hype gap+12
Incentives22
Confidence55
buildOne report1 publisher

Tailscale in unprivileged LXC: the green dot that answers nothing

The standard --tun=userspace-networking advice produces a tailnet member you cannot SSH into. The repair is two lines of container config, not a privileged container.

Publishers:dev.to

Reality

Evidence52
Adoption
Not scored
Hype gap+14
Incentives30
Confidence55