BiviousMODERN ACCESS / LEGACY ENVIRONMENTS

Private Early Access · 01

Connect legacy devices. Reach remote networks.

Bivious connects OpenVPN-capable legacy devices to Tailscale resources and gives Tailscale users access to supported OpenVPN customer networks. A self-hosted compatibility layer for two access paths.

Get Early Access See both access paths

The device still works.
Sometimes, it’s the remote network.

Some working devices cannot run a Tailscale client but can still connect with OpenVPN. Teams also need to reach customer and partner networks through their existing certificate-based OpenVPN access. Bivious supports both without replacing equipment or installing a remote VPN client on every workstation.

COMMON LEGACY DEVICES
  • Industrial controllers
  • IP cameras
  • Lab equipment
  • Embedded systems
  • Network appliances
  • Older servers
CUSTOMER AND PARTNER NETWORKS

Use an existing supported OpenVPN connection to reach specific IPv4 resources across a customer or partner network from Tailscale.

TWO ACCESS PATHS · CURRENT + PLANNED

03 / Access paths

Connect a Device.
Reach a Remote Network.

The direction depends on what needs to connect. Bivious bridges legacy Devices into a ZTNA network, or gives ZTNA users access to resources behind a supported Remote Network.

Green · Supported now Gray · Planned

Currently supported: Tailscale and OpenVPN.

Legacy Device ZTNA

Discuss Device access

Connect a legacy Device to permitted resources in a ZTNA network. Today, it uses OpenVPN and does not need a Tailscale client.

  1. Legacy Device

    Uses its existing VPN client.

  3. Bivious Connector

    Connects Device traffic to the ZTNA network.

  5. ZTNA network

    Resources follow the provider’s network and access policies.

    • Tailscale
    • NetBird
    • ZeroTier

  7. Permitted resources

    Services allowed by the Connector’s provider access policy.

ZTNA Remote Network

Discuss Remote Network access

Let ZTNA users reach specific IPv4 resources behind a supported certificate-based OpenVPN connection, without installing the customer VPN client on each workstation.

  1. ZTNA user

    Connects through an existing ZTNA provider.

    • Tailscale
    • NetBird
    • ZeroTier

  3. Bivious Connector

    Provides the path to a supported Remote Network.

  5. Remote Network

    Specific IPv4 subnets behind a supported certificate-based OpenVPN connection.

  7. Remote resources

    Reachable after subnet approval and normal Tailscale access policy.

Today, Tailscale administrators approve subnet routes and define who can reach them. Bivious does not provide customer DNS or Full Tunnel / Exit Node access.

Is Bivious a fit for your network?

Bivious is in Private Early Access. The MVP supports two clearly defined access paths using Tailscale and OpenVPN. Here is where it fits—and which Remote Network capabilities are outside this stage.

You can self-host Bivious and use your Tailscale network Bivious is self-hosted; Tailscale remains the access-control layer for both paths. Good fit
Tailscale controls access on both paths Tailscale administrators approve subnet routes and control which users can reach permitted resources. GOOD FIT
A legacy Device needs Tailscale access Use a Device’s existing OpenVPN support to reach permitted Tailscale resources. The Device does not require a Tailscale client. GOOD FIT
Tailscale users need a customer network Use a supported self-contained certificate-autologin OpenVPN profile to reach specific IPv4 subnets. GOOD FIT

Built from a problem we already know.

Bivious is built by network engineers who have faced these problems in real-world environments before.

We’ve spent years connecting systems that weren’t designed to work together, dealing with legacy devices, network constraints, and the operational complexity that comes with them. Bivious is our attempt to turn that experience into a simple product that helps others solve the same kinds of problems without having to build everything from scratch.

Our focus is practical: connect legacy Devices and give Tailscale users a clear route to supported Remote Networks.

Have a question? hello@bivious.net

Private Early Access · 06

Tell us what needs to connect.

We’re looking for teams connecting legacy devices to Tailscale or reaching customer and partner networks through supported OpenVPN connections. Tell us about your device or remote network and what needs to reach what, and we’ll assess whether Bivious is a fit.

What happens next
Use-case review → short conversation → hands-on onboarding if it’s a fit

We’ll use your responses to evaluate Early Access fit and help prioritize what to support next. Read our Privacy notice.