Twingate Review Australia 2026
Sourced business ZTNA — USD seats, US control plane, self-managed Connectors
Twingate is for sale to Australian organisations in USD with a free Starter cap (five users), a non-commercial Home plan at US$15/month, and a Teams business seat whose honest month-to-month figure on the public JSON-LD is US$6 — not the US$5 yearly teaser on the default card. The product is private-resource access via Connectors you run, with Google Workspace SSO and native posture on Teams. Public internet egress is optional and not on that starting card. Sydney Relays are not data residency. SOC 2 Type 2 and Hacker House work exist as vendor announcements with gated or unpublished reports. No independent speed or leak tests were run. This listing is not Identity Firewall, DNS Filtering as a standalone product, or a consumer VPN.
- Best for
- Australian organisations that can read per-user USD billed totals, will deploy their own Connectors, already use Google Workspace (or will pay for Business IdP connectors), and accept a US-hosted control plane plus gated audit reports.
- Not ideal for
- Anyone budgeting the yearly US$5 teaser as cancellable monthly, teams that need vendor-operated Australian public internet exits or Australian data residency, buyers who need inspectable public audit PDFs before paying, commercial use of Home/Starter, or anyone expecting a no-logs consumer VPN or WireGuard transport.
SoftwareHQ does not currently have an affiliate arrangement with Twingate. The review is independent of commercial relationships. Affiliate disclosure
Overview
Twingate is a business remote-access product. Ownership, logging, control-plane hosting and private-resource access are recorded separately. Public internet egress is not Australian data residency.
Feature highlights
These highlights come from vendor documentation and editorial analysis of public sources. They are not firsthand test results or a claim that every listed capability was exercised in a trial.
- US$5/user on the Teams card is a yearly teaser
AU Chrome on 12 Sep 2026 printed Teams US$5 with Yearly -15% checked and a sku=teams_annual trial href. JSON-LD monthly is US$6. Hand check 5×12=60. Do not budget US$5 as cancellable monthly.
- Connectors are yours; the Controller is in the US
You deploy Connectors behind the firewall (Docker/systemd/cloud). Twingate hosts the Controller on US Google Cloud and Relays worldwide, including Sydney. Sydney is not data residency.
- Private resources by default; public internet is opt-in
Split-tunnel to defined Resources is the product. Exit Networks (full-tunnel via your Connectors) are on Home and Business, not on the Teams card. This is not a vendor-operated AU browsing VPN.
- Teams SSO is Google Workspace; Okta/Entra start on Business
Teams card: SSO via Google Workspace, native posture, resource MFA. Okta, Entra ID, JumpCloud SCIM, Service Accounts and DNS filtering are Business (or Enterprise). Starter is social login only.
- Fair Use 8 GB relay bandwidth per user per month
Fair Use Policy 1 Sep 2026 applies to self-serve plans including Starter/Home/Teams/Business. Overage US$150 per 100 GB. Peer-to-peer is documented as the way to stay inside the cap.
- SOC 2 Type 2 is request-gated
Docs point existing customers to trust.twingate.com. AU Chrome rendered a blank Trust Center. Hacker House is named with no public PDF. Guessed ISO 27001 docs 404.
Ownership and jurisdiction
Legal entity and jurisdiction are not the exit-server map.
- Legal entity
- Twingate Inc.
- Jurisdiction
- United States (Delaware)
- Parent company
- Unknown
- Five Eyes
- Yes
Customer Agreement (version date 22 Apr 2024): Twingate means Twingate Inc., a Delaware corporation. Notices: 541 Jefferson Ave, Suite 100, Redwood City, CA 94063, USA. Governing law California; venue San Mateo County / N.D. Cal. Privacy Policy 13 Mar 2025: Twingate Inc., a U.S. company; EEA/UK/Swiss representative DataRep. About: founded 2019; remote-first with a core team in Redwood City. Subprocessors 31 Mar 2026 include Twingate Israel Ltd. (Israel) as a group company. The United States is a Five Eyes member. This listing is Private Access, not Identity Firewall.
- https://www.twingate.com/terms · checked 2026-09-12
- https://www.twingate.com/privacy · checked 2026-09-12
- https://www.twingate.com/about · checked 2026-09-12
Logging and retained data
A vendor no-logs claim is not proof of zero retained account or payment data.
- Logging policy
- Activity logs
- Retained service data
- Documented retained service data
Not a consumer no-logs VPN. Customer-data docs (31 Oct 2025): Services Data (names, emails, groups, resource definitions, security policies, network logs, access tokens) is stored on Controller infrastructure in the United States (Google Cloud). Content Data (payloads between Client and Resource) is end-to-end encrypted; Relays do not store traffic or network-identifiable information and cannot decrypt. Usage Data (crash reports, UI interactions, bandwidth, telemetry) is stored with Services Data. DNS Filtering, when enabled, logs domain names, time, user identity and device details in the United States. Twingate does not store user passwords (IdP authentication).
- user names and email addresses
- user groups, resource definitions and security policies
- network connection logs between Clients and Connectors
- Admin Console audit logs (exportable for the lifetime of the account)
- access tokens and configuration
- usage/telemetry and crash reports
- optional DNS Filtering query logs (US) when the add-on is enabled
- billing and payment identifiers when Twingate is controller
Compare table log retention minima: Starter 24 hours, Home 30 days, Teams 7 days, Business 30 days, Enterprise 12 months. Admin audit logs are described as exportable for the lifetime of the account. A no-logs claim would not apply.
Privacy Policy also collects device identifiers, IP address, GPS/sensor location to connect to the nearest server, and website analytics. International transfers. This is not proof of zero retained data.
- https://www.twingate.com/privacy · checked 2026-09-12
- https://www.twingate.com/docs/twingate-customer-data · checked 2026-09-12
- https://www.twingate.com/docs/analytics · checked 2026-09-12
- https://www.twingate.com/pricing · checked 2026-09-12
Locations and hosting
Advertised exit countries, physical-versus-virtual evidence, control-plane hosting and account data residency are separate. An Australian exit IP is not Australian data residency.
- Advertised exits
- Unknown
- Australian exit
- No
- Exit location evidence
- Unknown
- Physical vs virtual
- Unknown
- Control-plane hosting
- Overseas
- Account data residency
- Unknown
- Legacy data_hosting field
- Unknown
Twingate does not operate a consumer public-internet exit map. Default overlay is split-tunnel to defined Resources. Exit Networks (self-hosted Connectors as egress) are documented on Home and Business, not on the Teams card; sessions up to 12 hours. Relay docs list Australia (Sydney) on Google Cloud and DigitalOcean — Relays broker encrypted Client–Connector tunnels and do not terminate data-carrying connections. That is not a public internet exit and not Australian account residency. Controller / Services Data: United States (Google Cloud). DORA location list: USA for data processing, storage and service provision, plus subprocessor and Relay countries. Physical versus virtual of Relay sites unknown. Subprocessors 31 Mar 2026: Google LLC (production and Relay network), DigitalOcean (Relays), AWS (hosted connectors).
- https://www.twingate.com/docs/understanding-relays · checked 2026-09-12
- https://www.twingate.com/docs/twingate-customer-data · checked 2026-09-12
- https://www.twingate.com/docs/dora-locations · checked 2026-09-12
- https://www.twingate.com/docs/exit-networks · checked 2026-09-12
- https://www.twingate.com/privacy/subprocessors · checked 2026-09-12
Per-platform features
Protocol, kill switch and split tunnel are recorded per platform. Missing documentation stays unknown or not tested.
| Platform | Protocols | Kill switch | Split tunnel |
|---|---|---|---|
| Windows | Other | No | Yes |
| macOS | Other | No | Yes |
| iOS | Other | No | Yes |
| Android | Other | No | Yes |
| Linux | Other | No | Yes |
| ChromeOS | Other | No | Yes |
Windows: Windows 10/11 and Windows Server 2022/2025. Download get.twingate.com / api.twingate.com/download/windows (EXE or MSI). Default tunnel driver TunTap; Wintun optional. Client sets up a local VPN to 127.0.0.1 to intercept Resource traffic only; docs: will not affect regular internet browsing. No kill-switch doc (guessed /docs/kill-switch 404). Always-on in the background is the overlay, not a consumer internet-block. Windows Server: headless only; posture checks unsupported. .NET 8 Desktop Runtime from Nov 2024. Not leak-tested. Transport is TLS 1.2, not WireGuard.
macOS: Download api.twingate.com/download/darwin (pkg). Docs distinguish Mac App Store / standalone. Default split-tunnel. No kill-switch page. TLS 1.2. Not leak-tested.
iOS: App Store client (api.twingate.com/download/ios). Default split-tunnel to Resources. No kill-switch page. TLS 1.2.
Android: Play Store client shared with ChromeOS (api.twingate.com/download/android). Default split-tunnel. No kill-switch page. TLS 1.2.
Linux: Linux Client via public repos / convenience script. Connectors are a separate Linux Docker or systemd component on the private network (Ubuntu 22.04/24.04/26.04, Debian 11+, Fedora 41+, and others). Default Client split-tunnel. No kill-switch page. TLS 1.2. FAQ: WireGuard is not the current transport.
ChromeOS: Android & ChromeOS share the Play Store client. Pricing compare table lists ChromeOS with desktop/mobile apps. TLS 1.2. No kill-switch page.
Device limits and free tier
- Devices
- 5
- Concurrent connections
- Unknown
- Free tier
- Available
- Free-tier data cap
- Unknown
Starter: up to 5 users, 1 admin, 5 devices per user, 10 Remote Networks, 50 Resources, 12 relay locations, Basic relay tier, 24-hour log retention, social login. 14-day trial on paid Home/Teams/Business. Home is paid US$15/month and non-commercial. Fair Use 8 GB relay bandwidth per user per month (Home account 56 GB). Clients older than 12 months cannot connect.
Business controls
Some controls are plan-dependent. Do not infer them from a consumer tier.
- SSO
- Yes
- MFA
- Yes
- Device posture
- Yes
- Access policies
- Yes
- Audit logs
- Yes
- Private resource access
- Yes
- Public internet egress
- Plan-dependent
- Minimum seats
- 1
Reviewed starting business SKU is Teams (yearly teaser US$5/user/month; JSON-LD monthly US$6). Private-resource access via customer Connectors is the product, including on Teams. Teams: Google Workspace SSO, SaaS app gating, native device posture, MFA for bastion/SSH, automated least-privilege, up to 100 users / 3 admins / 5 devices per user / 20 Remote Networks / 100 Resources / 12 relay locations / Basic relay / 7-day log retention. Okta, Entra ID and JumpCloud SCIM, Exit Networks, Service Accounts and DNS filtering start on Business (or Home for Exit Networks/Service Accounts). Identity Firewall / Privileged Access (SSH, Kubernetes, session recording) is Enterprise. Starter social login is not Google Workspace directory sync. Public internet egress is opt-in Exit Networks (not on the Teams card). No 5-seat minimum printed. Do not buy Home or Starter for commercial use. Do not treat this as NordVPN or a mesh VPN (docs: Twingate vs Mesh VPNs).
Audit register
unknown
Security page (Oct 2024): Twingate undergoes annual SOC 2 audits and has a SOC 2 Type 2 report; request a copy from a Twingate contact. SOC 2 docs: existing customers request via trust.twingate.com; access expires after 30 days; sales@twingate.com for others. Auditor name and current report date were not printed on the public pages opened on 12 Sep 2026. AU Chrome on trust.twingate.com rendered a blank page; Request Access was not submitted.
- Report date
- Unknown
- Availability
- Announcement only
- Inspection
- Not independently inspected
A request-gated Trust Center report was not opened. A vendor SOC 2 claim is not an inspected independent report.
Hacker House
Security page: Twingate works with Hacker House for regular application security testing (white-box component analysis, reverse engineering, fuzzing, threat modeling). No public PDF was linked. Guessed /docs/hacker-house and /docs/penetration-testing 404.
- Report date
- Unknown
- Availability
- Announcement only
- Inspection
- Not independently inspected
A named-auditor vendor page is not an opened report. No public PDF was inspected.
When this was checked
Status as of (page snapshot) against a 90-day review target. Checked dates are not updated when the site is rebuilt.
Editorial article date: . That is not proof that pricing, hosting, or compliance was re-checked.
- PricingVerified
Verified — checked 12 September 2026.
USD. Default yearly cards Teams US$5 / Business US$10 user/month; JSON-LD monthly US$6 / US$12. Starter US$0. Home US$15/month flat. Tax additional. AU Chrome no GST/AUD line. Compare-table Teams $12 unresolved. Checkout not started.
- HostingUnknown
Unknown — checked date 12 September 2026 is not field-level evidence on its own.
Sydney Relays only. Controller / Services Data in the United States (Google Cloud). Unknown is not AU.
Subscription pricing
Prices below are in USD, not AUD. ex GST. An effective monthly equivalent is not a cancellable monthly price. Verified — checked 12 September 2026. Source: twingate.com/pricing.
Free on 12 Sep 2026: up to 5 users, 1 admin, 5 devices per user, 10 Remote Networks, 50 Resources, 12 relay locations, Basic relay tier, 24-hour log retention. Social login (Google, Microsoft, LinkedIn, GitHub). Not the reviewed business starting SKU. Get Started href auth.twingate.com/signup?flow=starter was not clicked.
- Introductory billed total
- 0.00 USD
- Term
- 1 month
- Bonus months
- None
- Effective monthly equivalent
- 0.00 USD effective monthly equivalent — not a cancellable monthly price
- Renewal
- 0.00 USD / 1 month
- Month-to-month option
- 0.00 USD
Checked 2026-09-12
Flat US$15 per month billed monthly (not per user) on 12 Sep 2026. Up to 7 users. Non-commercial individuals only (Home addendum 1 Oct 2025): corporations, educational institutions and government entities are ineligible. Includes Exit Networks and Service Accounts. Community support via r/twingate. 14-day trial CTA was not clicked. Not the reviewed business SKU.
- Introductory billed total
- 15.00 USD
- Term
- 1 month
- Bonus months
- None
- Effective monthly equivalent
- 15.00 USD effective monthly equivalent — not a cancellable monthly price
- Renewal
- 15.00 USD / 1 month
- Month-to-month option
- 15.00 USD
Checked 2026-09-12
JSON-LD Offer 'Teams (Monthly)' on the public pricing page 12 Sep 2026: US$6 user/month, unitText user/month, billingDuration MON, max 100 users. AU Chrome default cards printed US$5 with Yearly -15% checked and did not print US$6. Compare-features table also printed a Teams $12 cell — dual public with this US$6; the $12 was not stored as Teams monthly. Tax additional. Checkout not started.
- Introductory billed total
- 6.00 USD per user
- Term
- 1 month
- Bonus months
- None
- Effective monthly equivalent
- 6.00 USD effective monthly equivalent — not a cancellable monthly price (per user)
- Renewal
- 6.00 USD / 1 month per user
- Month-to-month option
- 6.00 USD per user
Checked 2026-09-12
Default AU Chrome Business-tab card 12 Sep 2026: US$5 user/month with Yearly -15% checked. Start 14-day Trial href sku=teams_annual was not clicked. Hand check 5*12=60 (US$60/user/year billed if the teaser is 12 months). US$5/mo is not cancellable monthly. JSON-LD Teams (Annual) price 5 / unitText user/month / billingDuration ANN. Badge Yearly -15% vs 5/6≈16.67% and 6*0.85=5.1 is dual public — 15% maths were not used as a billed total. Tax additional.
- Introductory billed total
- 60.00 USD per user
- Term
- 12 months
- Bonus months
- None
- Effective monthly equivalent
- 5.00 USD effective monthly equivalent — not a cancellable monthly price (per user)
- Renewal
- 60.00 USD / 12 months per user
- Month-to-month option
- 6.00 USD per user
Checked 2026-09-12
JSON-LD Offer 'Business (Monthly)' on the public pricing page 12 Sep 2026: US$12 user/month, max 500 users. Default cards printed US$10 with Yearly -15% checked, not US$12. Compare-features table also prints $12 in the Business row — dual public with the yearly US$10 teaser; $12 is stored only as this monthly SKU. Tax additional. Checkout not started. First listed SKU with Exit Networks, Okta/Entra SCIM and DNS filtering add-on.
- Introductory billed total
- 12.00 USD per user
- Term
- 1 month
- Bonus months
- None
- Effective monthly equivalent
- 12.00 USD effective monthly equivalent — not a cancellable monthly price (per user)
- Renewal
- 12.00 USD / 1 month per user
- Month-to-month option
- 12.00 USD per user
Checked 2026-09-12
Most Popular yearly card 12 Sep 2026: US$10 user/month with Yearly -15% checked. sku=business_annual was not clicked. Hand check 10*12=120 (US$120/user/year). US$10/mo is not cancellable monthly. JSON-LD Business (Annual) price 10. 10/12≈16.67% off the JSON-LD monthly 12, not 15%. Enterprise Custom / Talk to Sales is a quote and was not stored.
- Introductory billed total
- 120.00 USD per user
- Term
- 12 months
- Bonus months
- None
- Effective monthly equivalent
- 10.00 USD effective monthly equivalent — not a cancellable monthly price (per user)
- Renewal
- 120.00 USD / 12 months per user
- Month-to-month option
- 12.00 USD per user
Checked 2026-09-12
Compare Twingate subscription cash outlay
Observed price changes
Recorded when a listed price changed. This is not a complete vendor timeline.
- First capture from twingate.com/pricing (AU Chrome + curl + page JSON-LD). Default yearly cards Teams US$5 / Business US$10 user/month; JSON-LD monthly US$6 / US$12. Starter US$0. Home US$15/month flat. USD; tax additional. Compare-table Teams $12 cell left unresolved. Checkout not started.
Pros & Cons
Pros
- Public site loaded in an Australian session on 12 Sep 2026 without a Cloudflare challenge
- Starter US$0 and Home US$15/month flat are printed; Teams/Business yearly teasers and JSON-LD monthly US$6/US$12 are on the public pricing page (tax additional)
- Private-resource access via customer Connectors is the default product, including on Teams
- Google Workspace SSO, native device posture and resource MFA are on the Teams card
- Split-tunnel by default; Windows/macOS/Linux/iOS/Android/ChromeOS clients documented
- Sydney Relays are documented on Google Cloud and DigitalOcean
- 14-day trial on paid plans; ticketed support email published; Terraform/Pulumi/API documented
- Customer Agreement and DPA (1 Sep 2026) are public; subprocessors list dated 31 Mar 2026
Cons
- US$5/user/month on the Teams card is a yearly teaser, not cancellable monthly; Yearly -15% does not match 5/6≈16.67%
- USD with tax calculated additionally — not an AUD GST-inclusive grid; checkout was not started
- Compare-features table Teams $12 cell is dual public with JSON-LD monthly US$6
- Exit Networks, Okta/Entra SCIM and DNS filtering are not on the Teams card
- Sydney Relays are not Australian data residency; Controller data is in the United States
- SOC 2 Type 2 is request-gated and was not inspected; Hacker House has no public PDF; ISO 27001 docs 404
- No documented kill switch; transport is TLS 1.2, not WireGuard; Fair Use 8 GB/user/month through Relays
- Fees paid are not refundable; Teams log retention minimum is 7 days; no independent speed or leak tests
How this review was made
Reviews separate vendor documentation, editorial analysis and firsthand records. They are not interchangeable.
- Vendor documentation — Public pages from Twingate and other sites. Recorded HTTP(S) URLs are listed under Sources. A source URL is a document we recorded, not a claim that every sentence on this page was checked against that URL.
- Editorial analysis — SoftwareHQ's written verdict and scores for Australian buyers. The header score is an editorial assessment, not a user-review average, not a lab result, and not a number derived from how many evidence records exist.
- Firsthand records — This review has no firsthand observation records, trial walkthroughs, or screenshots from a logged-in SoftwareHQ account. Missing tests stay not tested.
This page does not rank products by speed or security from documentation or from evidence count.
Checked by SoftwareHQ Editorial Team. There is no named author profile for this page; attribution stays with the SoftwareHQ editorial team. How we test and the editorial policy for scoring, independence and affiliate rules.
Sources
Public pages recorded when this review was compiled. They are not a checklist that every claim was verified, and they are not evidence of hands-on product testing.
- Twingate official site (twingate.com)
- Twingate pricing
- Twingate Terms
- Twingate privacy policy
- Twingate Subprocessors
- Twingate Legal
- Twingate Dpa
- Twingate Sa
- Twingate User
- Twingate Partner
- Twingate about
- Twingate Download
- Twingate Home
- Twingate support
- Twingate Docs
- Twingate How Twingate Works
- Twingate Understanding Relays
- Twingate Understanding Connectors
- Twingate Connector Deployment
- Twingate How Encryption Works In Twingate
- Twingate Peer To Peer Communication In Twingate
- Twingate FAQ
- Twingate Subscription Management
- Twingate Subscription Cancellation
- Twingate Exit Networks
- Twingate Split Tunnel Failures
- Twingate Device Posture Checks
- Twingate Identity Providers
- Twingate Two Factor Authentication
- Twingate Analytics
- Twingate Audit Logs
- Twingate Twingate Security
- Twingate Soc 2
- Twingate Twingate Customer Data
- Twingate Dora Locations
- Twingate Clients
- Twingate Windows
- Twingate Macos
- Twingate Linux
- Twingate Ios
- Twingate Android
- Twingate Chromeos
- Twingate Twingate Pci
- Twingate Ztna
- Twingate Sa Fairuse 20260901.pdf
- Twingate Sa Home 20251001.pdf
- Twingate Sa Support 20250401.pdf
- Trust official site
- Twingate official site (status.twingate.com)
Twingate Alternatives
If Twingate doesn’t quite fit your needs, consider these alternatives for Australian businesses:
- NordLayer — Business remote access with per-seat USD plans; private gateways start on Core. From $10/user/mo.
- Tailscale — WireGuard mesh overlay with hosted coordination; public internet egress is opt-in. Free plan available.
- Cloudflare One — Hosted SASE/ZTNA; PAYG is US$7/user/month billed annually, not a browsing VPN. Free plan available.
Buyer guide
Source-based VPN guides for Twingate: what a VPN encrypts, billed-term cash, free versus paid caps, how intro differs from renewal, how to read audits, how kill switch, split tunnel and protocols vary by OS, and when a consumer exit is the wrong product for company resources. Not a ranking.