Skip to main content

Introduction

Welcome to Camouflage — a post-quantum secure network platform for building, managing, and monitoring private infrastructure.

What is Camouflage?​

Camouflage is a complete network toolkit: a zero-trust VPN with post-quantum encryption, a network visibility monitor, localhost tunneling, hardware TOTP, and a web dashboard — for teams of any size.

Products at a Glance​

  • Silo — Zero-trust VPN with fixed IPs, connection profiles, and three key exchange modes (Noise, PQXDH, Hybrid)
  • Lens — Network monitor that shows every connection with process-level attribution and hostname resolution
  • Mirror — Expose local services via public *.mirror.camouflage.network URLs
  • Phantom Key — Hardware TOTP authenticator with split-key post-quantum cryptography
  • Camouflage Cloud — Web dashboard for managing networks, nodes, users, ACLs, billing, and org settings
  • Camouflage Hub — Desktop app (macOS, Windows, Linux) that launches all products above

Three Editions​

  • Community Edition — Free forever. Self-hosted Docker container, 10 nodes, 2 networks. Perfect for small teams, home labs, and personal use.
  • Cloud Edition — Hosted SaaS at camouflage.network. Unlimited nodes and networks, SSO (Google, Microsoft), RBAC, multi-org, audit logs, billing, and integrations.
  • Enterprise Edition — Camouflage Cloud deployed on-prem. Full Cloud features with dedicated support, SLA, and custom IdP integration for high-stakes customers.

Key Capabilities​

Post-Quantum Security​

  • Three key exchange modes: Noise Protocol, PQXDH (Kyber KEM), and Hybrid
  • End-to-end encryption on every connection
  • Hardware-backed TOTP with split-key architecture
  • ACL enforcement at relay and network level

Private Network Management​

  • Create isolated networks with custom subnets and encryption settings
  • Three network modes: P2P (mesh), Gateway (internet routing), Mixed (both)
  • Node tagging for organizing devices and writing security policies
  • Fixed IP addresses that persist across reconnects

Enterprise Features​

  • Multi-organization support with tenant isolation
  • Custom roles with granular permissions (RBAC)
  • Google and Microsoft SSO
  • Activity logs and audit trails
  • Stripe billing with subscriptions and invoices
  • Slack and HubSpot integrations

Scalable Infrastructure​

  • QUIC-based relay servers that scale horizontally
  • Redis-cached peer discovery (90%+ cache hit rate)
  • Rate limiting and connection caps
  • Deploy on any cloud provider, VPS, or bare metal

Next Steps​