What do you like best about the product?

Migrating from a bastion server with SSH keys, trying to keep all of those in place and uptodate was cumbersome.

Using Terraform to manage Twingate users, groups, service accounts, tokens, connectors, and resources fits into the "Infrastructure as Code" paradigm nearly perfectly.

What do you dislike about the product?

There is a "click-ops" of policy management. It would be nice to have them also managed via Terraform.
It would also be nice to have MFA at the resource level. Depending upon workflow, the simple friction point of needing to authenticate can be enough to block a bad thing. Currently, even if the resources were in separate groups, each with the MFA enabled, if as soon as you have authenticated, all resources in all groups that require authentication are now accessible. I believe there is a plan to go with per-group authentication.

What problems is the product solving and how is that benefiting you?

Moving from a single Bastion server running SSH, using IaC, was cumbersome. Twingate significantly simplifies that, but also allows us to now use external pipelines to access the resources in a sensible manner using service accounts, as well as exposing private endpoints to the appropriate members in a secure fashion.

What do you like best about the product?

The best part in Twingate is the simple admin experience. After add the Gateway to infrastructure it's easy to add resources and manage policies. This is very useful when you have to manage a large number of resources, what is our case. Also, onboard internal users is so easy with Twingate client, we collected a lot of great feedbacks about the client app for all OS.

What do you dislike about the product?

No dislikes about Twingate. Maybe the pricing would be a problem if the number of seats are so high.

What problems is the product solving and how is that benefiting you?

We have multiple private cloud environments, with microservices and internal tools. Using Twingate we can control the acesses and ensure that only allowed people can access resources.

What do you like best about the product?

authentication, security, integration into existing apps

What do you dislike about the product?

clunky, why are there two icons on my home bar?

What problems is the product solving and how is that benefiting you?

Authentication, security

What do you like best about the product?

Twingate is an awesome "VPN" replacement software with an easy to use interface, easy end user setup, and top-notch security for split/full tunnel access.

What do you dislike about the product?

I hate to be "that guy" but I am here writing this review so hopefully someone at Twingate addresses some of the concerns and drawbacks I have with their product.

Twingate is outrageously horrible to configure and deploy across most MDMs such as NinjaRMM, Intune, and Jamf Pro. This is not limited to one OS its the same across macOS & Windows.

When it comes to installing the software "willy nilly" with nothing silent or configured for the end user it operates fine. When it comes to deploying it with those settings such as the root cert for next dns, machine key, silent install, configurations for the application such as launch agent on macOS, etc. it really has problems.

macOS is mainly where this product needs attention for deployment. It constantly has updating issues, dual instances, and orphaned system extensions. The Twingate team is well aware that the product falls short when it comes to Enterprise deployment and management.

I find a majority of issues lie within the documentation itself I had to "pry" proper deployment documentation for Jamf that works out of one of their leads for macOS. They need to heavily invest in updating deployment documentation across all MDMs they support and OS's they support.

I find a lot of the enterprise deployment "strategies" they recommend are very piece-meal and thrown together like a half-finished puzzle in which you the admin are left to "figure out". Their solution for deploying all items related to Twingate on Windows is one massive PowerShell script, which I am not opposed too if it worked and was easily manipulatable. I will give them props for a solid uninstall script on Windows though that works well when troubleshooting it.

Twingate falls flat on the macOS side mainly - the inability to troubleshoot the product with an easy to use uninstall script is what is really lacking here. macOS needs a proper uninstall script from Twingate that won't leave orphaned system extensions without a device restart -Windows does not have this issue.

From a product standpoint are you considering Twingate for home use or a small outfit - its going to work great. When it comes to large scale deployment, configuration, and management it really falls short.

DNS management and integration with NextDNS has a ton of growing to do - the GUI for an admin is confusing and could have more options. Seems like a ton of stuff is missing that you would expect from a DNSFiltering dashboard.

I could keep going but I have already ranted enough. I would avoid Twingate until it is more mature for larger enterprises. They need to invest resources into the product admin dashboard, dns integrations, and work with more MDMs to understand how their product is being used by admins and end users as far as usability and deployment goes.

What problems is the product solving and how is that benefiting you?

Twingate did not really "solve" anything for us it just made it easier for end users to more to a more modern "VPN" solution than use the legacy WatchGuard one we were. I think the security team enjoys the fact that the resources are easily manageable based on permissions and groups.

What do you like best about the product?

The install and configuration of Twingate is extremely easy and would highly recommend to anyone looking for a VPN alternative.

What do you dislike about the product?

Nothing to dislike! The product is very easy to use.

What problems is the product solving and how is that benefiting you?

We have an R&D team looking to provide access to our devices to external users and this was an excellent choice and was very easy to setup and add access and control access to our intewrnal resources.

What do you like best about the product?

Twingate is highly versatile, stable and secure vpn. Since it is opened to be programed by api's and scripts, a lot of people have probably already done the work for you if you need a custom setup. My use case is for cameras in multiple physical locations. I was able to setup a linux server that routes all the vpn traffic so I didn't even need to install the software to the camera server. Plus alias feature really makes adding multiple resources across multiple networks with the same ip schemes actually possible. There are a lot of good things to say about this product, I can't list them all.

What do you dislike about the product?

The only bad thing I can say about twingate is the high barrier to entry for support. I was able to get all the help I needed through the subreddit, the developers are very attentive there. However, sometimes it's hard to convince a finance or corporate team to purchase a product without some degree of support. A low cost per use support contract option would be nice to have. This is a minor gripe because again, they are very helpful on the subreddit.

What problems is the product solving and how is that benefiting you?

I have a local camera server and want to access cameras across multiple sites. To do this is normally a proprietary solution involving a lot of licensing and typically vendor lock-in. Plus, I have multiple camera brands across the board so there would be replacement costs. Not to mention the proprietary systems all use cloud storage, where the costs for comparable storage to my server is astronomical. Compare this Twingate which I can access any site I want, plus if I change to a different camera system, it will work for it. Even the hardware I've purchased is reuseable as it runs on any linux device.

What do you like best about the product?

Twingate has been transformative for our team, providing secure and high-performance access to our repository of large binary files. With the increasing size of our assets, we needed a solution that could handle the bandwidth demands while maintaining robust security and ensuring device compliance. Twingate has delivered on all fronts.

What do you dislike about the product?

While our overall experience with Twingate has been excellent, we've encountered a couple of minor, isolated issues with client installations and occasional network stability from clients across the world.

What problems is the product solving and how is that benefiting you?

Security is one of the focus of twingate and that's just an added plus to all the features we get already.

What do you like best about the product?

Twingate makes it easy to publish specific resources to specific users with maximum performance and availability. This is possible with other solutions, but the effort is significantly higher (typically requiring expensive specialists to implement very proprietary zero-trust solutions with a lot of moving parts). Twingate accomplishes this by proxying services by name directly to the site of the resource without having to consider IP routing or address conflicts. Once all of your user "VPN" traffic is routed through Twingate, internal least privilege security is much more attainable.

What do you dislike about the product?

If you need a custom installation, Twingate support will work with you, but the client install process is not as "out of the box," requiring complex scripts that are difficult to troubleshoot. But this is a one-time issue in edge cases, so not significant enough to affect a review. Also, I would like to see a Linux "appliance" to deploy Twingate instead of managing your own Linux installations and installing the software. The instructions are very easy and the install command is a single line, but I'd rather manage appliances than Linux servers.

What problems is the product solving and how is that benefiting you?

Twingate is enabling us to implement better zero trust networking. Once all of the clients are routing from Twingate connectors, we can use internal and host-based firewalls to really cut down on server-to-server or device-to-device communications, helping prevent lateral movement within our network. This is possible with other solutions, but the ease of implementation and the simple management (with no downsides that I have discovered) make success much more attainable.

What do you like best about the product?

There is no need to configure clients with specific credentials for users.
Ability to use DNS-based routing.
Terrafrom support.
Ease of troubleshooting thanks to reporting and "recent activity".
Google Workspace integration
Sleek adminitstartration portal.
Very security-conscious approach to configuring resources down protocol and port and time-based restrictions.

What do you dislike about the product?

We have Arch Linux users and a lack of an official package in the Arch repository is a downside for them as it requires them to write custom scripts.
The administration portal is nice, but the lack of bulk creation of resources and bulk editing makes the onboarding process a little more tedious.
Sometimes providing access to specific users, not the group, is more convenient. The current approach forces us to create a group for every user which requires particular access.
We have shared testing phone devices for our QA team ideally it would be more secure to be able to avoid using personal account on them and instead use some machine login.

What problems is the product solving and how is that benefiting you?

Google workspace native integration to avoid multiplienf unecassery creadentials.
Provide access to specific resources only whout forcing to route all traffic.
Ability to install on every platform.
Small footprint on our infrastructure.
High availability access to resources thanks to native support of multiple connectors.

What do you like best about the product?

1. Easy to setup
2. Low cost
3. Secure
4. Users can be granted access to the necessary resources as needed.
5. Multiple login & authenticated options
6. The admin has the capability to monitor which users have access and at what times.
7. The administrator has the capability to identify the users logged in from specific computers or devices.
8. Multiple Device integration options, etc

What do you dislike about the product?

So far, I am not observed any issues related to Twingate.

What problems is the product solving and how is that benefiting you?

1. Lowered pricing compared to conventional VPN services.
2. As a recent startup, I am certainly experiencing significant advantages with Twingate. Their support has added an extra layer of benefits, particularly in boosting our user count. We are also proud to announce our partnership with Twingate, which is helping us enhance our company revenue and connect with potential clients and customers.
https://pvk-infotech.com/partners.html