Longbridge Mesh — A WireGuard mesh with short-lived identity. Built for CI and previews.

How it works

Every machine joins the mesh with an identity that expires.

A Longbridge Mesh Network is a private WireGuard overlay. Machines join with a join key — or an OIDC identity exchanged straight from your CI — get a stable name and tags, and talk directly. Policy is written against tags, not brittle IP allowlists.

Short-lived join keys, or OIDC identity straight from your CI.
Tag-based policy — machines inherit access from what they ARE.
Ephemeral previews get a stable name, then vanish on merge.

What you get

Ephemeral CI identity

Exchange a CI job's OIDC token for a mesh identity — nothing long-lived to leak in a secret store.

Tag-based access

Write policy against tags (ci, prod, db). Access follows what a machine is, not the IP it happened to get.

Preview networks

Spin a network per pull request; every preview is reachable by name and torn down automatically.

Priced per network

One flat rate per Network — never per user, never per machine.

Pricing

Priced the honest way.

A Longbridge Mesh Network is priced as one flat rate per network — never per user or per device. During early access it is metered but free.

Early access

Metered, and free while we open it up.

One rate per Network (network-hours).
Relay bytes only when a direct path is impossible.
No per-seat or per-machine charges — ever.

Pricing lands as Mesh graduates; early-access networks are free.

See how Longbridge prices

Part of the platform

One account underneath every product.

Every Longbridge product shares one Org, one Console, and one bill — so adding the next one is a toggle, not another vendor to onboard.

See the whole platform

One login & Org
One bill · EU merchant of record
One CLI, SDK & Terraform provider
EU-native by default

Try it

A taste — the rest is in the docs.

Join from CI

# in CI — exchange the job's OIDC token for a mesh identity
lbr mesh join preview-$PR --tags ci,preview

# …now reach any tagged peer directly, by name
curl http://api.preview-$PR.mesh:8080/health

No long-lived keys — the CI job’s own identity joins the mesh. Read the docs

The honest part

Priced per network — no per-seat, no per-device tax.
Short-lived identity by default; nothing long-lived to leak.
Standard WireGuard; your machines, your routes.
EU-native control.

A WireGuard mesh with short-lived identity. Built for CI and previews.

Start in the Console — or read the docs first. It's your call.

Create a network → Read the docs