Tailscale vs Twingate — Australia 2026

Evidenced differences

• WireGuard mesh versus Connector ZTNA. Tailscale documents a WireGuard mesh to private nodes, subnet routers and ACLs. Devices join the tailnet. Twingate documents Clients talking to customer-run Connectors through a hosted Controller and Relays. FAQ: transport is TLS 1.2, not WireGuard. That is vendor documentation, not an app test and not a speed result. Do not treat Twingate as a mesh VPN or Tailscale as Connector ZTNA.
• Introductory billed total and covered months. Tailscale Standard monthly billed 800 USD cents for 1 covered month and renews at 800 every month. Twingate Teams yearly billed 6000 USD cents for 12 covered months and renews at 6000 every 12 months. 12-month cash is 9600 versus 6000. 800×12=9600 ≠ 800 because the monthly intro is one month. 6000/12=500 equals the yearly intro. 500×12=6000 — do not print a false ≠. 9600+9600+9600=28800 versus 6000+6000+6000=18000 if the documented renewals are taken. Do not store 8×12=96 as a Tailscale yearly billed SKU. 600×12=7200 is Teams monthly JSON-LD, not the yearly intro. 5×12=60 is the yearly billed dollars if the teaser is 12 months. 6×0.85=5.1 is not 5. Compare-features Teams $12 is dual public with JSON-LD $6 and is not a stored Teams billed total. Columns stay in USD. Cash is per listed user, not a team checkout. Premium, Mullvad add-on, Home, Starter and Business yearly are not this cash table.
• Public internet egress on the starting SKU. Tailscale public_internet_egress is yes but opt-in. The default overlay is split (tailnet only). A customer-run exit node (any plan) or the Mullvad add-on is required to send public internet traffic through a tunnel. DERP Australia (Sydney) is a relay for already-encrypted mesh traffic, not a public internet exit. Twingate public_internet_egress is plan_dependent. Exit Networks (self-hosted Connectors as egress) are documented on Home and Business, not on the Teams card. Relays Australia (Sydney) broker encrypted Client–Connector tunnels and do not terminate data-carrying connections. Do not buy Twingate Teams for vendor-shaped public internet egress.
• Device caps on the compared SKUs. Tailscale documents unlimited user devices on Standard. Twingate documents 5 devices per user on listed self-serve plans including Teams. A six-device user cannot treat the Teams per-user 6000 figure as covering that device count. Checkout was not started, so whether the five-device cap is enforced at payment is unknown.
• Identity providers and SCIM on the starting SKU. Tailscale delegates identity to an IdP (Apple, Google, GitHub, Microsoft Entra ID, Okta, OneLogin, custom OIDC) on all plans including Personal. SCIM user/group provisioning is Standard+. MFA is the IdP's MFA. Twingate Teams documents Google Workspace SSO. Okta, Entra ID and JumpCloud SCIM start on Business. Starter social login is not Google Workspace directory sync. If Okta/Entra SCIM on the cheapest commercial SKU is a hard requirement, the stored Twingate Teams card does not fill that slot.
• Free and non-commercial tiers. Tailscale Personal is US$0 for up to 6 users, unlimited user devices, and is documented as non-commercial — not the Standard cash column. Custom-domain sign-up starts a 14-day business trial. Twingate Starter is US$0 for up to 5 users, 1 admin, 5 devices per user, 24-hour log retention and social login — not the Teams cash column. Twingate Home is US$15/month flat (not per user), up to 7 users, non-commercial (Home addendum); corporations are ineligible. Do not use Personal, Starter or Home for commercial work.
• Relay bandwidth fair use. Twingate Fair Use (1 Sep 2026) documents 8 GB relay bandwidth per user per month (Home account 56 GB) with overage US$150/100 GB. Tailscale Standard has no equivalent stored relay-bandwidth cap; Mullvad add-on pricing is per 5 devices, not a relay GB quota. Whether Twingate's 8 GB is enforced at payment is unknown. Checkout was not started.
• Advertised Australia / Sydney presence. Tailscale DERP docs and controlplane.tailscale.com/derpmap/default list Australia (Sydney), region syd — that is an encrypted relay, not a public internet exit. australian_exit_advertised is no. Twingate Relay docs list Australia (Sydney) on Google Cloud and DigitalOcean — Relays broker encrypted tunnels. australian_exit_advertised is no. Neither record is Australian account data residency. Twingate Controller / Services Data is United States (Google Cloud). Physical versus virtual remains unknown on both.
• Inspectable report scope. Tailscale publishes a SOC 2 Type II claim (security, availability, confidentiality); the legal hub says the report is confidential (log in or NDA) and it was not opened. Latacora assessments are on request via the DPA and were not opened. Twingate publishes a SOC 2 Type 2 claim; existing customers request via trust.twingate.com. AU Chrome on trust.twingate.com rendered a blank page; Request Access was not submitted. Hacker House is named on the security page with no public PDF. full_report_inspected is false on every stored row. A vendor badge is not a numeric security score.
• Legal entities and Five Eyes. Tailscale new accounts from 3 Sep 2024 contract with Tailscale US Inc. (Delaware); accounts existing 2 Sep 2024 remain Tailscale Inc. in Toronto. Twingate is Twingate Inc., a Delaware corporation (Redwood City, California law). Five Eyes is yes on both stored legal-entity fields. Neither jurisdiction is Australian data residency. Tailscale privacy processing names Canada, Germany, the United States and the United Kingdom. Twingate Services Data is stored on Controller infrastructure in the United States (Google Cloud).
• Listed tax treatment. Both stored gst_basis values are exclusive. Tailscale Terms §3.3: fees do not include sales/use/VAT; taxes appear separately on invoices. Twingate Customer Agreement §3.7: fees do not include taxes. AU Chrome on both printed no GST line. Checkout was not started, so an Australian GST line was not observed. Listed USD cents are not GST-inclusive Australian checkout prices.
• Business versus consumer products. This pair is business remote access only. Personal NordVPN, Surfshark, Proton VPN and the other consumer listings are a different family. Tailscale Personal is documented as non-commercial and is not the Standard cash column. Twingate Home is documented as non-commercial and is not the Teams cash column. Tailscale Aperture, PAM and the Mullvad add-on are separate. Twingate Identity Firewall, DNS Filtering add-on and MSP are separate. Do not infer a consumer no-logs VPN from either admin product.

Buyer scenarios

Reproducible prepaid cash example

Horizons are cash charged, not prorated service. A 24-month prepaid is billed in full inside 12 months. Australian checkout totals stay unknown. Open the same plans in the cost tool

Hand checks: 800/1=800; 800*12=9600 ≠ 800; 6000/12=500; 500*12=6000.

• Cash outlay counts billed charges when they are taken. A 24-month prepaid is billed in full inside a 12-month horizon.
• The effective monthly figure is an average of the introductory billed total over covered months. It is not the cash charged each month.
• Australian checkout totals are unknown. Checkout was not started. Card FX fees are omitted.
• Exclusive listed amounts are before tax. VAT/GST that a checkout might add is not in the cash column.

Unknown on this pair

• Australian checkout totals (checkout was not started; both listed amounts are USD exclusive of tax; card FX fees omitted)
• AUD equivalent of the USD billed totals without a dated HTTPS FX quote — and that quote would still not be checkout
• Tailscale sales-side annual billed totals (FAQ mentions them; no public yearly SKU was printed)
• Whether a Twingate Yearly-checkbox click would print JSON-LD monthly prices on a different client (this session’s Framer click did not switch the cards)
• Whether Twingate’s five-device-per-user cap or 8 GB Fair Use quota is enforced at payment
• Compare-features Teams $12 versus JSON-LD Teams monthly $6 as a payable SKU (dual public; $12 was not stored as Teams billed)
• Mullvad add-on and Exit Networks checkout totals
• Physical versus virtual Australian / Sydney locations on both products
• Account and control-plane data residency (data_hosting remains unknown on both)
• Inner pages of Tailscale’s login-gated SOC 2 PDF and Twingate’s request-gated Trust Center
• Independent speed, leak-test or streaming-unblocking results — not tested

Original conclusions from the record

• On the stored USD cards, Tailscale Standard monthly 12-month cash is 9600 USD cents and Twingate Teams yearly 12-month cash is 6000 USD cents. Covered months are 1 versus 12. 800×12=9600 ≠ 800 because the monthly intro is one month. 6000/12=500 equals the yearly intro. 500×12=6000 — do not print a false ≠. 36-month cash is 9600+9600+9600=28800 versus 6000+6000+6000=18000 if the documented renewals are taken. Same billed currency does not make 6000 a cheaper Australian checkout ranking. Amounts are exclusive of tax; charged Australian totals stay unknown. 8×12=96 is not a Tailscale yearly billed SKU. 600×12=7200 is Teams monthly JSON-LD, not the yearly intro. 5×12=60. 6×0.85=5.1 is not 5.
• Architecture is the product difference. Tailscale Standard is a WireGuard mesh with ACLs; public internet egress is opt-in (exit node on any plan, or Mullvad add-on). Twingate Teams is Connector-based private access over TLS 1.2; Exit Networks are not on that card. That is help-centre copy, not an app test.
• Device and identity caps on the compared SKUs are not the same product. Tailscale Standard documents unlimited user devices and SCIM. Twingate Teams documents 5 devices per user and Google Workspace SSO; Okta/Entra SCIM starts on Business. A six-device user or an Okta-SCIM buyer cannot treat 9600 versus 6000 as interchangeable SKUs.
• Inspectable report scope does not separate the pair: both stored audit rows are announcement-only or gated, with full_report_inspected false. Those are not numeric security scores.
• Both advertise some Australia/Sydney relay presence (Tailscale DERP; Twingate Relays on GCP and DigitalOcean). Neither record establishes Australian data residency. Both retain account, device and connection metadata; neither is a consumer no-logs VPN.
• This is not a ranked winner, not a numeric security score, and not a speed or streaming result. Personal browsing VPNs are out of scope for both business listings.

Sources

• Tailscale pricing (12 Sep 2026)
• Tailscale WireGuard mesh
• Tailscale exit nodes (opt-in internet egress)
• Tailscale DERP including Australia (Sydney)
• Tailscale ACLs
• Tailscale identity providers
• Tailscale SCIM (Standard+)
• Tailscale legal hub (SOC 2 confidential)
• Tailscale terms
• Twingate pricing (12 Sep 2026)
• How Twingate works (Clients, Connectors, Controller, Relays)
• Twingate encryption (TLS 1.2)
• Twingate FAQ (transport is not WireGuard)
• Twingate Connectors
• Twingate Relays including Australia (Sydney)
• Twingate Exit Networks (not on Teams)
• Twingate identity providers
• Twingate SOC 2 (request-gated)
• Twingate security (Hacker House announcement)
• Twingate customer data (US Controller)
• Twingate Fair Use (8 GB/user/month through Relays)
• Twingate terms

Calculation clock 2026-09-12. Product research dates stay 2026-09-12. Changing the evaluation time does not rewrite those checked dates.