A private dark network for enterprises.
In the age of AI, anything you expose gets found. CanMe connects people, sites, clouds and machines by identity, so nothing you run has to be exposed.
Start with one Core. Grow from there.
Step 1
Core
The brain. Every identity, every rule, every key, in one place you run. Deploy two more and it fails over by itself.
Comes as an appliance — hardware and software — or as software for your own servers and clouds.
Step 2
Mesh
The backbone. Encrypted reach between your people, sites and clouds. Need reach somewhere new? Add a Mesh there.
Comes as an appliance — hardware and software — or as software for your own servers and clouds.
Step 3
Gate
The guard. For machines that can't run software and sites without a firewall. Everything behind it gets an identity and stays dark.
Comes as an appliance or as software — whatever fits the site.
Step 4
Cannector
The identity in your pocket. On every OS, servers included. Sign in once, or join the device, and it's part of the network, wherever it is.
Software from every major app store, plus a command-line client for servers.
Step 5
LINK
Dark in a box. Plug it in front of anything — a camera, a turbine, a machine. It becomes one identity, and the thing behind it goes dark.
Hardware — a Cannector in a small box. It works like a check valve: only what you allow gets through.
Runs where you choose. Never with us.
Your premises
C5-audited data centres
AWS · Azure · GCP
Sovereign clouds
Bare metal
Air-gapped ready
It calls home only for its license and updates, and for support when you turn it on.
Rather not run it yourself? A certified CanMe partner can host it for you.
Six apps. One Cansole.
Click through it. Every screen here ships today, shown with demo data.
Good morning, Admin
Tuesday, 30 September
Try it: open any app.
Search or jump to…One afternoon to set up. One sign-in to join.
The admin, one afternoon
- 113:00Name your network and add the DNS records
- 213:20Install the Core
- 314:00Add a Mesh
- 415:00Connect and grant the first access
Coming next
We already run them ourselves.
- Coming next
CAN MCP
An identity-aware MCP gateway, hidden inside your Cloud Area Network. One address for every MCP server, and each agent sees only the tools its identity allows.
- Coming next
CAN Agents
Zero-trust agents inside your Cloud Area Network. They work for your team and reach only what you allow.