A private dark network for enterprises.

In the age of AI, anything you expose gets found. CanMe connects people, sites, clouds and machines by identity, so nothing you run has to be exposed.

CoreMeshGateCannectorLINK

Start with one Core. Grow from there.

  1. Core

    The brain. Every identity, every rule, every key, in one place you run. Deploy two more and it fails over by itself.

    Comes as an appliance — hardware and software — or as software for your own servers and clouds.

  2. Mesh

    The backbone. Encrypted reach between your people, sites and clouds. Need reach somewhere new? Add a Mesh there.

    Comes as an appliance — hardware and software — or as software for your own servers and clouds.

  3. Gate

    The guard. For machines that can't run software and sites without a firewall. Everything behind it gets an identity and stays dark.

    Comes as an appliance or as software — whatever fits the site.

  4. Cannector

    The identity in your pocket. On every OS, servers included. Sign in once, or join the device, and it's part of the network, wherever it is.

    Software from every major app store, plus a command-line client for servers.

  5. LINK

    Dark in a box. Plug it in front of anything — a camera, a turbine, a machine. It becomes one identity, and the thing behind it goes dark.

    Hardware — a Cannector in a small box. It works like a check valve: only what you allow gets through.

Ports, sizing and requirements

Runs where you choose. Never with us.

  • Your premises

  • C5-audited data centres

  • AWS · Azure · GCP

  • Sovereign clouds

  • Bare metal

  • Air-gapped ready

It calls home only for its license and updates, and for support when you turn it on.

Rather not run it yourself? A certified CanMe partner can host it for you.

Six apps. One Cansole.

Click through it. Every screen here ships today, shown with demo data.

17

Good morning, Admin

Tuesday, 30 September

Search or jump to…

One afternoon to set up. One sign-in to join.

The admin, one afternoon

  1. 113:00Name your network and add the DNS records
  2. 213:20Install the Core
  3. 314:00Add a Mesh
  4. 415:00Connect and grant the first access

Everyone else, one sign-in

  1. 1Install Cannector
  2. 2Sign in
  3. 3Connected

Coming next

We already run them ourselves.

  • Coming next

    CAN MCP

    An identity-aware MCP gateway, hidden inside your Cloud Area Network. One address for every MCP server, and each agent sees only the tools its identity allows.

  • Coming next

    CAN Agents

    Zero-trust agents inside your Cloud Area Network. They work for your team and reach only what you allow.

See it on your own network.

Or start from your situation: