About CanMe
Everyone wanted it. No one built it.
Cloud thinking for the network. It always made sense. So we built it — and proved it first where the rules are hardest.
How it started
No one should be able to look inside your network. Not even us.
For years we designed IT for other companies. Every time, the same thing stood in the way: the network.
To reach a system, you had to expose it. A port here, a VPN there, a firewall rule nobody dared to delete. Every opening was a door someone could find — and whoever ran the network could see inside it.
Too many teams, too many stacks, no one holding the whole picture. The network wasn’t an inconvenience. It was where companies lost control.
When we set out to move global operations to the cloud, it stopped us again. So we asked a different question: what if the network had no doors at all? What if no one could look inside — not the provider, not the host, not even us?
A dark network, made for enterprises. If we build this, we build it right.
Years of consulting
The same bottleneck, every project.
The spark
Moving global operations to the cloud — and the network stops us again.
Two years of building
The network we always wanted.
April 2024
CanMe GmbH is founded, with its first customer.
Today
Six apps live.
Next
CAN MCP and CAN Agents.
Computing moved to the cloud. The network stayed in 1995.
Servers became services. Software became a subscription. Sign-in became an identity. The network? Still addresses, rules and tickets — built for a world where everyone sat in one building.
Hyperscalers don’t manage firewalls. They manage identities, policies and intent. VLANs multiplied, NACs gathered dust, and identity providers solved everything except the network itself.
We thought: the network deserves this. So we built it — for your network, in your data centre.
| 1995 | Today | |
|---|---|---|
| Computing | Server room | Cloud |
| Software | On a disk | Subscription |
| Sign-in | A password per system | Identity |
| Network | Addresses, rules, tickets | Addresses, rules, tickets |
| With CanMe | Identity. Nothing exposed. |
The world is moving faster.
AI finds an exposed system in minutes.
Agents need to reach everything.
A network with no doors is no longer a choice. It’s a necessity.
So we started where it’s hardest.
Our first customers came from the most demanding places there are: critical infrastructure, regulated industries, systems that must never be reachable by the wrong person. We built CanMe with them, and made sure it paid off for them from the first day.
NIS2, GDPR and ISO 27001 aren’t a chapter we added. They’re why we exist.
Built for the strictest rules — and just as good for every company that simply wants its network to be easy. Sovereignty comes with it, as a feature.
Nicer than a SaaS tool.
The ease you expect from the cloud — without handing anyone your network.
Stronger than a hosted service.
Wherever it runs, it stays yours. No one can look inside — not even us.
Easier than a firewall.
No rules on IP addresses. Who reaches what, by identity, in three clicks.
How we work.
Not even us.
Your data centre, a cloud, a partner — wherever CanMe runs, what’s inside stays with you. We built it so that no one can look inside, not even us. That’s not a promise. It’s architecture.
If it isn’t easy, it isn’t done.
The network was never short of power. It was short of simple. That’s the bar for every screen we ship.
Built with the people who run it.
CanMe started with a customer, not a pitch deck. Our clients shape what comes next.
Micro pessimists, macro optimists.
We assume every exposed port gets found — and still believe the network can be simple.
Made in Hof, Germany.
A team of architects and engineers in Hof, Bavaria. We build all of CanMe here — BSI-built, GDPR-native, made in Germany.
Personal enough that you talk to the people who build it.
What’s next
We run CanMe on CanMe.
Our compliance, our operations, the services we run, and now our AI agents. We try things, we learn, we iterate — and what holds up goes back into CAN, every day. The pillars it stands on never get watered down: identity, sovereignty, nothing exposed.
- Coming next
CAN MCP
One address for every MCP server, hidden inside your Cloud Area Network. Each agent sees only the tools its identity allows.
- Coming next
CAN Agents
Zero-trust agents inside your Cloud Area Network. They work for your team and reach only what you allow.
Advancing without firewalls. Come along.
See it on your own network.
Like how we think? Come build it.
We’re a team in Hof, building the network we always wanted.
Nothing that fits right now? Write to us anyway — hello@canme.cloud