Who this is actually for

Manage VPN access across multiple client environments from one console, with per-client teams and reporting.

Answer "who could access what, and when" without stitching together spreadsheets and shell scripts.

Turn a bare OpenVPN deployment into a product you can actually support at scale.

Device and geo restrictions mean a stolen credential alone isn’t enough to connect.

A full audit trail and hard quota enforcement for teams that need to prove control, not just claim it.

Self-hosted means the compliance conversation starts from "it never left our infrastructure."