Migrating from a bastion server with SSH keys, trying to keep all of those in place and uptodate was cumbersome.

Using Terraform to manage Twingate users, groups, service accounts, tokens, connectors, and resources fits into the "Infrastructure as Code" paradigm nearly perfectly. Review collected by and hosted on G2.com.

There is a "click-ops" of policy management. It would be nice to have them also managed via Terraform.

It would also be nice to have MFA at the resource level. Depending upon workflow, the simple friction point of needing to authenticate can be enough to block a bad thing. Currently, even if the resources were in separate groups, each with the MFA enabled, if as soon as you have authenticated, all resources in all groups that require authentication are now accessible. I believe there is a plan to go with per-group authentication. Review collected by and hosted on G2.com.

The best part in Twingate is the simple admin experience. After add the Gateway to infrastructure it's easy to add resources and manage policies. This is very useful when you have to manage a large number of resources, what is our case. Also, onboard internal users is so easy with Twingate client, we collected a lot of great feedbacks about the client app for all OS. Review collected by and hosted on G2.com.

No dislikes about Twingate. Maybe the pricing would be a problem if the number of seats are so high. Review collected by and hosted on G2.com.

Our team really appreciates the ability to create groups and manage team resources through them. We also find it very easy to implement. Review collected by and hosted on G2.com.

Managing temporary access for external users can sometimes be challenging. Review collected by and hosted on G2.com.

Twingate is an awesome "VPN" replacement software with an easy to use interface, easy end user setup, and top-notch security for split/full tunnel access. Review collected by and hosted on G2.com.

I hate to be "that guy" but I am here writing this review so hopefully someone at Twingate addresses some of the concerns and drawbacks I have with their product.

Twingate is outrageously horrible to configure and deploy across most MDMs such as NinjaRMM, Intune, and Jamf Pro. This is not limited to one OS its the same across macOS & Windows.

When it comes to installing the software "willy nilly" with nothing silent or configured for the end user it operates fine. When it comes to deploying it with those settings such as the root cert for next dns, machine key, silent install, configurations for the application such as launch agent on macOS, etc. it really has problems.

macOS is mainly where this product needs attention for deployment. It constantly has updating issues, dual instances, and orphaned system extensions. The Twingate team is well aware that the product falls short when it comes to Enterprise deployment and management.

I find a majority of issues lie within the documentation itself I had to "pry" proper deployment documentation for Jamf that works out of one of their leads for macOS. They need to heavily invest in updating deployment documentation across all MDMs they support and OS's they support.

I find a lot of the enterprise deployment "strategies" they recommend are very piece-meal and thrown together like a half-finished puzzle in which you the admin are left to "figure out". Their solution for deploying all items related to Twingate on Windows is one massive PowerShell script, which I am not opposed too if it worked and was easily manipulatable. I will give them props for a solid uninstall script on Windows though that works well when troubleshooting it.

Twingate falls flat on the macOS side mainly - the inability to troubleshoot the product with an easy to use uninstall script is what is really lacking here. macOS needs a proper uninstall script from Twingate that won't leave orphaned system extensions without a device restart -Windows does not have this issue.

From a product standpoint are you considering Twingate for home use or a small outfit - its going to work great. When it comes to large scale deployment, configuration, and management it really falls short.

DNS management and integration with NextDNS has a ton of growing to do - the GUI for an admin is confusing and could have more options. Seems like a ton of stuff is missing that you would expect from a DNSFiltering dashboard.

I could keep going but I have already ranted enough. I would avoid Twingate until it is more mature for larger enterprises. They need to invest resources into the product admin dashboard, dns integrations, and work with more MDMs to understand how their product is being used by admins and end users as far as usability and deployment goes. Review collected by and hosted on G2.com.

Twingate is highly versatile, stable and secure vpn. Since it is opened to be programed by api's and scripts, a lot of people have probably already done the work for you if you need a custom setup. My use case is for cameras in multiple physical locations. I was able to setup a linux server that routes all the vpn traffic so I didn't even need to install the software to the camera server. Plus alias feature really makes adding multiple resources across multiple networks with the same ip schemes actually possible. There are a lot of good things to say about this product, I can't list them all. Review collected by and hosted on G2.com.

The only bad thing I can say about twingate is the high barrier to entry for support. I was able to get all the help I needed through the subreddit, the developers are very attentive there. However, sometimes it's hard to convince a finance or corporate team to purchase a product without some degree of support. A low cost per use support contract option would be nice to have. This is a minor gripe because again, they are very helpful on the subreddit. Review collected by and hosted on G2.com.

It help us make the non production env secure and accessible for developers. Review collected by and hosted on G2.com.

Connector updates are less frequent and need manual effort. Instead I just created the existing connector. Review collected by and hosted on G2.com.

There is no need to configure clients with specific credentials for users.

Ability to use DNS-based routing.

Terrafrom support.

Ease of troubleshooting thanks to reporting and "recent activity".

Google Workspace integration

Sleek adminitstartration portal.

Very security-conscious approach to configuring resources down protocol and port and time-based restrictions. Review collected by and hosted on G2.com.

We have Arch Linux users and a lack of an official package in the Arch repository is a downside for them as it requires them to write custom scripts.

The administration portal is nice, but the lack of bulk creation of resources and bulk editing makes the onboarding process a little more tedious.

Sometimes providing access to specific users, not the group, is more convenient. The current approach forces us to create a group for every user which requires particular access.

We have shared testing phone devices for our QA team ideally it would be more secure to be able to avoid using personal account on them and instead use some machine login. Review collected by and hosted on G2.com.

Twingate has been transformative for our team, providing secure and high-performance access to our repository of large binary files. With the increasing size of our assets, we needed a solution that could handle the bandwidth demands while maintaining robust security and ensuring device compliance. Twingate has delivered on all fronts. Review collected by and hosted on G2.com.

While our overall experience with Twingate has been excellent, we've encountered a couple of minor, isolated issues with client installations and occasional network stability from clients across the world. Review collected by and hosted on G2.com.

1. Easy to setup

2. Low cost

3. Secure

4. Users can be granted access to the necessary resources as needed.

5. Multiple login & authenticated options

6. The admin has the capability to monitor which users have access and at what times.

7. The administrator has the capability to identify the users logged in from specific computers or devices.

8. Multiple Device integration options, etc Review collected by and hosted on G2.com.

So far, I am not observed any issues related to Twingate. Review collected by and hosted on G2.com.

Twingate was a breath of fresh air after many months of trying to find a ZTNA solution that fit our needs. Having previously opted to use another company that ultimately fobbed us off for not being 'enterprise' enough I was glad to find Twingate that was both featureful and sensibly priced.

The initial setup was incredibly straightforward, to the point where I was suspicious I was missing something key. But within a short amount of time I had thrown together a proof of concept and a couple of weeks later had it rolled out to the rest of the company.

We now have staff using it daily, to access all sorts of resources, with full control and logs of who is accessing what and when.

While I can't speak too deeply into the security of it, from what I've read it appears secure without over-complicating things, and where possible traffic doesn't traverse Twingate's network - and even if it does, it's through a straight-through secure tunnel between the client and the connector.

All the staff I've spoken to, from support to sales have been friendly, helpful and understanding, helping to iron out any of our onboarding issues. Review collected by and hosted on G2.com.

Some features feel like they lack the 'full implementation' - e.g. the auto-lock and request access feature - the fact a resource can't be 'request only' without the rolling auto-lock window is frustrating. We don't need such strict control on our resource access so it's not a deal breaker but if you do need something like Teleport's Just-in-time access feature understand it's not quite the same.

The arbritary minimum users required to get any support on the top-plan felt a little unusual. I understand needing to cover costs, and thankfully we just hit that minimum, but if we were much smaller I feel like we would have been out in the cold.

Their in-built DNS security is a great drop-in for introducing DNS security to all staff, but the narrow options on being able to control logging mean that we won't use it - logging all requests isn't something we're interested in doing and believe it betrays the trust of our staff. In the mean time we've opted to use the NextDNS integration which was really straight forward. Review collected by and hosted on G2.com.