VPN servers · Mesh · Site-to-site · Failover
Launch private servers on Vultr, DigitalOcean or Hetzner in minutes, or self-host with one command. Connect your devices in a mesh, link your offices, and fail over automatically when a server goes down.
Free plan: 1 self-hosted server, 2 connections and 2 mesh devices.
fra-edge-1
Hetzner · Falkenstein
nyc-core
DigitalOcean · New York
sgp-relay
Vultr · Singapore
home-lab
Self-hosted · Ubuntu 24.04
$ ssh rod@office-nas.acme.mesh
VPN servers
Launch on Vultr, DigitalOcean or Hetzner in the region and size you pick, or run one install command on a Linux machine you already have.
Pick where it runs
Falkenstein · 2 vCPU · 4 GB
Build the protocol
Incompatible options are greyed out, like Salamander obfs for VLESS.
Share a connection
Scan the QR code, download the config, or sign in to the Seridian app and connect.
# copy yours from the portal; it carries a one-time token
$ curl -fsSL <portal-api>/install.sh \
| sudo bash -s -- \
--token <enroll-token>
✓ agent installed, server onlineProtocols
Use WireGuard for speed, native IKEv2 or SSTP when you can't install an app, and the censorship-resistant ones where plain VPN traffic gets blocked.
Highlighted: built to get through restrictive networks
Mesh network
Laptops, phones and servers each get a private IP and a name, so they can reach each other from anywhere.
office-nas.acme.mesh.rod-laptopThis device
Windows 11 · 100.64.0.2
fra-edge-1Exit host
Linux · 100.64.0.1
office-nas
Linux · 100.64.0.9
pixel-8
Android · 100.64.0.5
ana-mbp
macOS · 100.64.0.7
Drop files to send to office-nas
Sent over the mesh; if it's offline, it picks the file up later.
Site-to-site
Connect whole networks through a hub server or the mesh. Install the Linux site agent, or download a ready-made config for the router you already run.
# Seridian site-to-site: Berlin office (MikroTik)# RouterOS 7. Upload this file and run: /import file-name=<this file>/interface wireguard add name=seridian-s2s mtu=1420 private-key="<generated>"/interface wireguard peers add interface=seridian-s2s public-key="<hub key>" endpoint-address=hub.example.net endpoint-port=51820 allowed-address=10.67.0.1/32,10.20.0.0/24 persistent-keepalive=25s/ip address add address=10.67.0.3/24 interface=seridian-s2s/ip route add dst-address=10.20.0.0/24 gateway=seridian-s2sDynamic gateways and health
Group servers into a gateway. Seridian scores each one from health checks and client reports, and connections fail over to the healthiest.
09:40
Clients on fra-edge-1, the top-scored member
WireGuard · 11 ms from Europe · 0% loss
09:41
Probes lose fra-edge-1, its score drops
Europe and USA report 100% packet loss
09:42
A client's handshake goes stale and it moves on
Next in its list: ams-edge-2 · 14 ms
09:42
Connected through ams-edge-2
Same connection, already a peer on every gateway
Remote desktop
View and control another mesh device's screen without opening ports. The device being viewed is asked for consent every time.
Invite people by email as admins or members, and switch between the workspaces you belong to.
The protocol builder greys out anything incompatible, so every server you launch actually works.
Servers, sites and mesh devices report in continuously, so problems show up on the dashboard first.
Monthly plans through Stripe, with managed servers priced by size and prorated mid-month.
Sign in once and your connections and mesh devices are ready.
Use cases
Give everyone access to internal tools without exposing them to the internet.
Typical setup
Link office LANs so printers, file shares and servers are reachable from every site.
Typical setup
Stay connected on hotel Wi-Fi, mobile networks and countries that block plain VPNs.
Typical setup
Pricing
Plans are billed monthly through Stripe. Managed cloud servers are added on top, from $7 a month each depending on size.
$0 / month
$5 / month
$49 / month
FAQ
No. Managed servers run on Vultr, DigitalOcean or Hetzner and are billed through your Seridian plan. If you'd rather use your own hardware or VPS, install the agent with one command and it's a self-hosted server.
WireGuard is the best default. Use IKEv2 or SSTP when a device can only use its built-in VPN client, and VLESS + REALITY, AmneziaWG, Hysteria2 or ShadowTLS on networks that block or throttle ordinary VPNs.
A VPN server gives people an encrypted route to the internet or a network through that server. The mesh connects your own devices to each other with private IPs and names, and can route internet traffic through a host device you choose.
Yes. Seridian generates configs for pfSense / OPNsense, FortiGate, MikroTik and UniFi, and for any other IPsec or WireGuard device. Linux machines can run the site agent instead.
A gateway is a group of servers that Seridian ranks by health. Each client gets the list in order and moves to the next server when its handshake goes stale, so a regional outage doesn't take everyone offline.
From the USA, Europe, Africa and Mainland China. They measure latency, packet loss, reachability and handshakes, with throughput tests from the USA, Europe and Africa.
Through Stripe. Owners and admins pick a plan and manage payment details from the Billing page. Managed servers added or removed mid-month are prorated. See the plans above.
Start on the free plan with a self-hosted server, or launch a managed one in the region you need.