Tailscale Review Australia 2026
Sourced business mesh overlay — USD seats, hosted US/Canadian control plane
Tailscale is for sale to Australian organisations in USD with a documented free Personal tier (non-commercial, six users) and a Standard business seat at US$8/user/month. The product is a WireGuard mesh to private resources, with SSO/MFA via your identity provider and ACLs on the starting paid SKU. Public internet egress is optional. Sydney DERP is not data residency. SOC 2 Type II and Latacora work exist as vendor announcements with gated reports. No independent speed or leak tests were run. This listing is not Aperture, PAM or a consumer VPN.
- Best for
- Australian organisations that can read per-seat USD prices, already have an identity provider, want a private overlay rather than a browsing VPN, and accept a hosted overseas control plane plus gated audit reports.
- Not ideal for
- Anyone treating Personal as a company VPN, buyers who need a vendor-operated Australian public internet exit or Australian data residency, teams that need inspectable public audit PDFs before paying, or anyone expecting Tailscale to be a no-logs consumer VPN.
SoftwareHQ does not currently have an affiliate arrangement with Tailscale. The review is independent of commercial relationships. Affiliate disclosure
Overview
Tailscale is a business remote-access product. Ownership, logging, control-plane hosting and private-resource access are recorded separately. Public internet egress is not Australian data residency.
Feature highlights
These highlights come from vendor documentation and editorial analysis of public sources. They are not firsthand test results or a claim that every listed capability was exercised in a trial.
- Standard is US$8 per occupied seat, not an annual teaser
On 12 Sep 2026 the public grid printed Standard US$8 and Premium US$18 per user per month. AU Chrome showed no yearly billed total and no GST line. Taxes are additional. 8×12=96 is arithmetic, not a printed prepaid SKU.
- Personal is free and non-commercial; six users
Personal is $0 with unlimited user devices and a six-user cap. Pricing FAQ: not for commercial use. Custom-domain sign-up starts a 14-day business trial.
- Private overlay by default; public internet is opt-in
ACLs, subnet routers and peer-to-peer WireGuard are the product. Exit nodes (your device) or the Mullvad add-on (US$5 / 5 devices, beta) are required to send public internet traffic through a tunnel.
- SSO is the IdP you already have; SCIM starts on Standard
Tailscale is not an identity provider. Native IdPs include Google, Microsoft Entra ID, Okta, GitHub, Apple and OneLogin. MFA is whatever the IdP enforces. SCIM is documented on Standard+.
- Sydney DERP is a relay, not data residency
DERP docs and the live derpmap list Australia (Sydney). That is encrypted relay metadata, not an Australian control plane. Privacy processing is Canada, Germany, the US and the UK.
- SOC 2 Type II is login- or NDA-gated
Legal hub: the SOC 2 report is confidential. Latacora work is on request via the DPA. Neither report was inspected here.
Ownership and jurisdiction
Legal entity and jurisdiction are not the exit-server map.
- Legal entity
- Tailscale US Inc. (new accounts from 3 Sep 2024); Tailscale Inc. (accounts existing 2 Sep 2024)
- Jurisdiction
- United States (Delaware) for new accounts; Canada (Ontario) for legacy accounts
- Parent company
- Unknown
- Five Eyes
- Yes
Terms 25 Aug 2026 Schedule A: existing customer accounts as of 2 Sep 2024 are Tailscale Inc., 100 King Street West, Suite 6200, Toronto, ON M5X 1B8, Canada. New customer accounts on or after 3 Sep 2024 are Tailscale US Inc., a Delaware corporation, 447 Sutter St Ste 405 #543, San Francisco, CA 94108, USA. Self-serve business customers: New York law and New York County courts. Privacy processing locations include Canada, Germany, the United States and the United Kingdom. Both the United States and Canada are Five Eyes members. Company page: fully remote. Footer: Tailscale is a registered trademark of Tailscale Inc. This listing is the Tailscale Solution (mesh overlay), not Aperture or PAM.
- https://tailscale.com/terms · checked 2026-09-12
- https://tailscale.com/privacy-policy · checked 2026-09-12
- https://tailscale.com/company · checked 2026-09-12
Logging and retained data
A vendor no-logs claim is not proof of zero retained account or payment data.
- Logging policy
- Connection logs
- Retained service data
- Documented retained service data
Not a consumer no-logs VPN. Privacy Policy 25 Aug 2026: Tailscale collects device name, OS, host name, IP address, cryptographic public key, user agent, language, date/time of access, Inter-Node Traffic Logs (logs describing connections and statistics about data sent to and from other devices), and client version. It does not process or have the ability to access the content of User traffic on the Tailscale Solution, which is end-to-end encrypted. Coordination-server logs cannot be limited. Client logging can be opted out (support may then be limited). Customers may generate additional Customer Log Data (controller). Aperture and PAM collect separate content/session data and are not this listing.
- name and email / username
- company or organisation name
- node and tailnet configuration
- device name, OS, host name, IP address, public key
- Inter-Node Traffic Logs (connection metadata and volume statistics, not packet contents)
- configuration audit logs (90 days in the admin console, all plans)
- client logs used for security, fraud prevention and analytics (retention policy: 12 months)
- payment and billing identifiers (retention policy: 7 years)
- optional network flow logs on Premium+ when enabled
Security data-retention policy: customer account and tailnet live production data for the duration of contract (processor); client logs 12 months; support records 5 years; payment 7 years. A no-logs claim would not apply. Inter-node metadata is required to coordinate the mesh.
Security FAQ: Tailscale receives metadata about which private nodes connect to which other private nodes, including public IP addresses. DERP relays do not decrypt traffic. MagicDNS public DNS queries are not logged (client is open source). This is not proof of zero retained data.
- https://tailscale.com/privacy-policy · checked 2026-09-12
- https://tailscale.com/security · checked 2026-09-12
- https://tailscale.com/docs/features/logging · checked 2026-09-12
- https://tailscale.com/security-policies/data-retention-deletion · checked 2026-09-12
Locations and hosting
Advertised exit countries, physical-versus-virtual evidence, control-plane hosting and account data residency are separate. An Australian exit IP is not Australian data residency.
- Advertised exits
- Unknown
- Australian exit
- No
- Exit location evidence
- Unknown
- Physical vs virtual
- Unknown
- Control-plane hosting
- Overseas
- Account data residency
- Unknown
- Legacy data_hosting field
- Unknown
Tailscale does not operate a consumer public-internet exit map. Default overlay leaves public internet traffic alone. Customer-run exit nodes (all plans) send internet traffic through a device you control. Mullvad VPN add-on uses Mullvad infrastructure (beta; not mixed into the seat; Mullvad's country list was not re-copied here). DERP docs and controlplane.tailscale.com/derpmap/default list Australia (Sydney), region syd / RegionID 5, nodes 5e/5f/5g — that is an encrypted relay, not a public internet exit and not Australian account residency. Privacy: processing in Canada, Germany, the United States and the United Kingdom. Security FAQ: coordination server runs on Linux in AWS VPCs; backups to S3; analytics in Snowflake. Subprocessors (26 Aug 2026): AWS, DigitalOcean, Hetzner, Akamai/Linode, Vultr, NetActuate in US and/or EEA. Physical versus virtual of DERP sites unknown.
- https://tailscale.com/docs/reference/derp-servers · checked 2026-09-12
- https://controlplane.tailscale.com/derpmap/default · checked 2026-09-12
- https://tailscale.com/docs/features/exit-nodes · checked 2026-09-12
- https://tailscale.com/docs/features/exit-nodes/mullvad-exit-nodes · checked 2026-09-12
- https://tailscale.com/privacy-policy · checked 2026-09-12
- https://tailscale.com/dpa-subprocessors · checked 2026-09-12
- https://tailscale.com/security · checked 2026-09-12
Per-platform features
Protocol, kill switch and split tunnel are recorded per platform. Missing documentation stays unknown or not tested.
| Platform | Protocols | Kill switch | Split tunnel |
|---|---|---|---|
| Windows | WireGuard | Plan-dependent | Yes |
| macOS | WireGuard | Plan-dependent | Yes |
| iOS | WireGuard | Plan-dependent | Yes |
| Android | WireGuard | Plan-dependent | Yes |
| Linux | WireGuard | No | Yes |
Windows: Download: Windows 10 or later or Windows Server 2016 or later. Built on WireGuard (wireguard-go). Default overlay is split (tailnet only). Exit node is full-tunnel opt-in. AlwaysOn.Enabled / ForceEnabled MDM can keep the client connected (Windows). Not a consumer kill switch that blocks public internet when the overlay drops. Not leak-tested.
macOS: Docs: three macOS variants (Mac App Store, Standalone/zip, tailscaled). AlwaysOn.Enabled is iOS/macOS/Windows. Default overlay is split. VPN On Demand is documented. docs/install/macos 404; working paths /download/macos and /docs/concepts/macos-variants.
iOS: App Store client. AlwaysOn.Enabled and VPN On Demand documented. Default overlay is split; exit node opt-in. CLI is not supported on iOS.
Android: Play/download client. App-based split tunnelling (include/exclude) from v1.70. ForceEnabled MDM listed for Android. Default overlay is split. CLI is not supported on Android.
Linux: Primary install is curl https://tailscale.com/install.sh | sh (script source on GitHub). CLI is the main interface. Default overlay is split. Exit node / subnet router need IP forwarding. AlwaysOn.Enabled is not listed for Linux in the system-policy table opened. --no-logs-no-support disables client telemetry.
Device limits and free tier
- Devices
- Unlimited
- Concurrent connections
- Unlimited
- Free tier
- Available
- Free-tier data cap
- Unknown
Personal: up to 6 users, non-commercial use, 3 ACL groups, 50 tagged resources, 1,000 ephemeral minutes/month. Unlimited user devices. 14-day business trial is for new custom-domain accounts (work email), not a second free plan. Tagged resources beyond 50 are US$1/month each. Mullvad add-on is paid.
Business controls
Some controls are plan-dependent. Do not infer them from a consumer tier.
- SSO
- Yes
- MFA
- Yes
- Device posture
- Yes
- Access policies
- Yes
- Audit logs
- Yes
- Private resource access
- Yes
- Public internet egress
- Yes
- Minimum seats
- 1
Reviewed starting business SKU is Standard (US$8/user/month). Identity is delegated to an IdP (Apple, Google, GitHub, Microsoft Entra ID, Okta, OneLogin, custom OIDC) on all plans including Personal — Tailscale is not an identity provider and has no Tailscale password. MFA is the IdP's MFA. SCIM user/group provisioning is Standard+. Device posture: default node OS/version attributes on all plans; MDM/EDR/XDR integrations and geolocation attributes start on Standard. ACLs/grants (private-resource access) on all plans. Configuration audit logs and webhooks on all plans (90 days). Network flow logs and log streaming are Premium+. Just-in-time access is Premium+. Public internet egress is opt-in (customer exit node on all plans, or Mullvad add-on). Tailnet Lock is documented. Do not buy Personal for commercial use. Do not treat Aperture or PAM as this SKU.
Audit register
unknown
Vendor security page and legal hub: SOC 2 Type II covering AICPA Trust Services Criteria for security, availability and confidentiality. Legal hub: the SOC 2 report is Confidential Information under the Terms of Service; log in to Tailscale to download, or contact support to sign an NDA. 2023 blog announced a Type II reassessment and in-product download for tailnet users. Auditor name and current report date were not printed on the public pages opened on 12 Sep 2026.
- Report date
- Unknown
- Availability
- Announcement only
- Inspection
- Not independently inspected
A login-gated or NDA-gated report was not opened. A vendor SOC 2 badge is not an inspected independent report. Login was not used.
Latacora
Security page: Tailscale works with Latacora on application, network and corporate security audits, monitoring, maturity-model and design review. 'Security audits are available on request, for more information see our Data Processing Addendum.' No public PDF was linked.
- Report date
- Unknown
- Availability
- Announcement only
- Inspection
- Not independently inspected
On-request / DPA-gated assessments were not inspected. A vendor named-auditor claim is not an opened report.
When this was checked
Status as of (page snapshot) against a 90-day review target. Checked dates are not updated when the site is rebuilt.
Editorial article date: . That is not proof that pricing, hosting, or compliance was re-checked.
- PricingVerified
Verified — checked 12 September 2026.
USD. Personal US$0 / Standard US$8 user/month / Premium US$18 user/month. Mullvad add-on US$5/month per 5 devices. Tax additional. No public yearly billed total. AU Chrome no GST line. Checkout not started.
- HostingUnknown
Unknown — checked date 12 September 2026 is not field-level evidence on its own.
DERP Australia/Sydney is a relay only. Account/control-plane hosting is AWS with processing in CA/DE/US/UK. Unknown is not AU.
Subscription pricing
Prices below are in USD, not AUD. ex GST. An effective monthly equivalent is not a cancellable monthly price. Verified — checked 12 September 2026. Source: tailscale.com/pricing.
Free forever on 12 Sep 2026: up to 6 users, unlimited user devices, 3 ACL groups, 50 tagged resources, 1,000 ephemeral minutes/month. Pricing FAQ: Personal is for non-commercial use (homelab, friends). Custom-domain sign-up is treated as business and starts a 14-day trial. Not the reviewed business starting SKU.
- Introductory billed total
- 0.00 USD
- Term
- 1 month
- Bonus months
- None
- Effective monthly equivalent
- 0.00 USD effective monthly equivalent — not a cancellable monthly price
- Renewal
- 0.00 USD / 1 month
- Month-to-month option
- 0.00 USD
Checked 2026-09-12
Starting listed business SKU on 12 Sep 2026: US$8 per user per month, seat-based (occupied seats, not MAU). Unlimited user devices. SCIM, MDM/EDR posture integrations, 10 ACL groups, 1,000 ephemeral minutes. No 5-user minimum printed. Taxes additional. AU Chrome printed $8 with no GST/AUD line. Get started was not clicked. FAQ mentions annual plans via sales; no public yearly billed total was printed so no yearly SKU is stored. Hand check 8*12=96 is a 12-month multiple, not a checkout quote.
- Introductory billed total
- 8.00 USD per user
- Term
- 1 month
- Bonus months
- None
- Effective monthly equivalent
- 8.00 USD effective monthly equivalent — not a cancellable monthly price (per user)
- Renewal
- 8.00 USD / 1 month per user
- Month-to-month option
- 8.00 USD per user
Checked 2026-09-12
Vendor 'Most popular' card: US$18 per user per month. Adds just-in-time access, advanced Tailscale SSH, network flow logs, log streaming, regional routing, priority support, 300 ACL groups, 10,000 ephemeral minutes. Taxes additional. Checkout not started. Enterprise (custom, Contact sales) is a quote and is not stored.
- Introductory billed total
- 18.00 USD per user
- Term
- 1 month
- Bonus months
- None
- Effective monthly equivalent
- 18.00 USD effective monthly equivalent — not a cancellable monthly price (per user)
- Renewal
- 18.00 USD / 1 month per user
- Month-to-month option
- 18.00 USD per user
Checked 2026-09-12
Separate add-on, not mixed into the Standard/Premium seat. Pricing page: US$5 per month for every 5 devices. Docs (beta, v1.48.2+): Mullvad servers as Tailscale exit nodes. Modify-plan: purchase in increments of five licences. Get started / billing add-ons were not clicked. This is not the Tailscale mesh SKU and not a Tailscale-operated public VPN exit map.
- Introductory billed total
- 5.00 USD
- Term
- 1 month
- Bonus months
- None
- Effective monthly equivalent
- 5.00 USD effective monthly equivalent — not a cancellable monthly price
- Renewal
- 5.00 USD / 1 month
- Month-to-month option
- 5.00 USD
Checked 2026-09-12
Compare Tailscale subscription cash outlay
Observed price changes
Recorded when a listed price changed. This is not a complete vendor timeline.
- First capture from tailscale.com/pricing (AU Chrome + curl). Personal US$0 / Standard US$8 user/month / Premium US$18 user/month. Mullvad add-on US$5/month per 5 devices. Tagged resources US$1/month each beyond 50 (note only). USD; tax additional. No yearly billed total on the public grid. Checkout not started.
Pros & Cons
Pros
- Public site loaded in an Australian session on 12 Sep 2026 without a Cloudflare challenge
- Standard US$8 and Premium US$18 per occupied seat are printed on the public pricing page (tax additional)
- Genuine free Personal plan with unlimited user devices (six-user, non-commercial cap)
- Private-resource access (ACLs, subnet routers, peer-to-peer WireGuard) is the default product, including on Standard
- SSO via existing IdPs and IdP MFA on the starting plans; SCIM on Standard+
- Configuration audit logs on all plans; device-posture integrations on Standard+
- DERP Australia (Sydney) is documented as a relay; live derpmap listed region syd
- 14-day business trial for new custom-domain accounts; client apps for Windows, macOS, iOS, Android and Linux
Cons
- USD with tax calculated additionally — not an AUD GST-inclusive grid; checkout was not started
- No public yearly billed total; FAQ annual plans are sales-side and were not stored
- Personal is explicitly non-commercial; a seventh user or commercial use needs a paid plan
- Public internet egress is not on by default; Mullvad add-on is a separate paid beta
- Sydney DERP is not Australian data residency; control plane is AWS / US-EEA subprocessors
- SOC 2 Type II report is login- or NDA-gated and was not inspected; Latacora is on request
- Always-on / disconnect-prevention is MDM policy, not a consumer kill switch on the default client
- No independent speed, leak-test or streaming-unblocking results in this review
How this review was made
Reviews separate vendor documentation, editorial analysis and firsthand records. They are not interchangeable.
- Vendor documentation — Public pages from Tailscale and other sites. Recorded HTTP(S) URLs are listed under Sources. A source URL is a document we recorded, not a claim that every sentence on this page was checked against that URL.
- Editorial analysis — SoftwareHQ's written verdict and scores for Australian buyers. The header score is an editorial assessment, not a user-review average, not a lab result, and not a number derived from how many evidence records exist.
- Firsthand records — This review has no firsthand observation records, trial walkthroughs, or screenshots from a logged-in SoftwareHQ account. Missing tests stay not tested.
This page does not rank products by speed or security from documentation or from evidence count.
Checked by SoftwareHQ Editorial Team. There is no named author profile for this page; attribution stays with the SoftwareHQ editorial team. How we test and the editorial policy for scoring, independence and affiliate rules.
Sources
Public pages recorded when this review was compiled. They are not a checklist that every claim was verified, and they are not evidence of hands-on product testing.
- Tailscale official site
- Tailscale pricing
- Tailscale Terms
- Tailscale privacy policy
- Tailscale Dpa
- Tailscale Dpa Subprocessors
- Tailscale Legal
- Tailscale security
- Tailscale Security Policies
- Tailscale Company
- Tailscale Press
- Tailscale Download
- Tailscale Windows (tailscale.com)
- Tailscale Macos
- Tailscale Linux (tailscale.com)
- Tailscale Ios (tailscale.com)
- Tailscale Android (tailscale.com)
- Tailscale Pricing V4
- Tailscale 5000 Customers
- Tailscale Tailscale Launch
- Tailscale 2nd Soc 2 Type Ii Audit
- Tailscale Tailscale Privacy Anonymity
- Tailscale How Tailscale Works
- Tailscale Free Trial Offer Terms
- Tailscale Tailscale Aup
- Tailscale Sla
- Tailscale support
- Tailscale Derp Servers
- Controlplane Default
- Tailscale Exit Nodes
- Tailscale Mullvad Exit Nodes
- Tailscale Mullvad
- Tailscale Device Posture
- Tailscale Identity
- Tailscale Custom Oidc
- Tailscale Multifactor Auth
- Tailscale User Group Provisioning
- Tailscale Okta Scim
- Tailscale Logging
- Tailscale Audit Logging
- Tailscale Network Flow Logs
- Tailscale Log Streaming
- Tailscale Tailscale System Policies
- Tailscale Ios Vpn On Demand
- Tailscale Android App Split Tunneling
- Tailscale Subnet Routers
- Tailscale Acls
- Tailscale Modify Existing Plan
- Tailscale Support Options
- Tailscale Macos Variants
- Tailscale Control Data Planes
- Tailscale Wireguard
- Tailscale Windows (tailscale.com)
- Tailscale Linux (tailscale.com)
- Tailscale Ios (tailscale.com)
- Tailscale Android (tailscale.com)
- Tailscale Reviewer Guide
Tailscale Alternatives
If Tailscale doesn’t quite fit your needs, consider these alternatives for Australian businesses:
- NordLayer — Business remote access with per-seat USD plans; private gateways start on Core. From $10/user/mo.
- Twingate — Hosted ZTNA overlay; self-managed Connectors; USD seats, not a browsing VPN. Free plan available.
- Cloudflare One — Hosted SASE/ZTNA; PAYG is US$7/user/month billed annually, not a browsing VPN. Free plan available.
Buyer guide
Source-based VPN guides for Tailscale: what a VPN encrypts, billed-term cash, free versus paid caps, how intro differs from renewal, how to read audits, how kill switch, split tunnel and protocols vary by OS, and when a consumer exit is the wrong product for company resources. Not a ranking.