High Performance Secure Networking…
WireGuard is a FOSS (Free and Open-Source Software) technology for connecting distributed computers — servers, laptops, tablets, phones, IoT (Internet of Things) devices — together as if they were on the same local network. WireGuard is renowned for its security and performance. It offers a rock-solid foundation for building zero-trust networks, providing:
-
Encrypted connections
-
Mutual authentication
-
Native network-stack integration
…With an Easy-to-Use Management UI
Pro Custodibus is an integrated set of tools with a web GUI (Graphical User Interface) that makes it easy to manage WireGuard networks. It allows you to:
-
Track usage, monitor logs, receive alerts
-
Add and remove users and devices
-
Manage network access, routing, key rotation, and more…
We host and maintain Pro Custodibus for you as a SaaS (Software as a Service) with the Pro Custodibus Software as a Service Edition; or you can run Pro Custodibus fully on your own premises with the Pro Custodibus Enterprise Edition.
Real-time Network Usage Display
Pro Custodibus keeps track of who’s using your network, from where, and on what devices.
Use its big-picture dashboards to see what’s going on now, or to check up on long-term trends; then zero-in on specific users, IP addresses, or connections that are causing problems. Use its helpful visualizations to spot misconfigurations or over-granted permissions before they become security incidents.
Comprehensive Audit Logging
Don’t let changes to WireGuard configuration settings hide in the shadows. Pro Custodibus shines a light on these changes, logging each one, and surfacing them in easy-to-read displays. This allows you to look back on previous changes to see who did what, when; as well as to keep tabs on new changes as they’re made.
You can also connect the log events Pro Custodibus generates to your own SIEM (Security Information and Event Management) systems, for further analysis and automation.
Simple Provisioning of Users and Devices
Adding new users or new devices to an existing WireGuard network can be challenging. With Pro Custodibus, you can set them up with a simple web UI, which will automatically deploy everything you need to enrolled devices.
For devices not managed by Pro Custodibus, you can grant users permission to log into Pro Custodibus themselves and download (or scan QR codes of) your pre-configured WireGuard settings, allowing them easy access to your network.
Alerting for Suspicious Activity
You’ll get timely and relevant alerts of suspicious activity or other potential security issues from Pro Custodibus. If something suspicious is happening over your WireGuard network, you’ll know about it immediately.
You’ll also receive warnings about misconfigurations that can render your network insecure or inoperable, like key reuse or mismatches.
Multi-Factor Authentication
WireGuard itself uses state-of-the-art public-key cryptography for device authentication. Pro Custodibus allows you to add an additional, interactive challenge to authenticate the user of each WireGuard session.
With this MFA system, you can customize session lifetimes as long or short as you like. Having users authenticated with MFA will raise your level of confidence in granting access to your high-value resources over WireGuard.
Continuous Deployment of Configuration Updates
The hardest problem with managing WireGuard networks is coordinating updates. Change the private key of one device, and you’ll have to update its public key on a dozen other devices. Change the IP address of one device, and you’ll have to make another dozen corresponding changes.
But with Pro Custodibus, you can just make the change in our web UI, and it’ll be deployed automatically to all managed devices. No manual fiddling, no copy-and-paste errors, no “whoops I forgot to make the same change in five different places”.
Automated Key Rotation
Pro Custodibus will automatically rotate your WireGuard preshared keys for you, so you get all the benefits of regular key rotation, without any of the pain.
Instead of going through an error-prone, time-consuming process of manual key-rotation every year (or quarter, or month), you can configure automatic key-rotation policies with Pro Custodibus. This allows you to increase your security by using much shorter key-rotation intervals than otherwise would be practical.
Bring Your Own Network
You don’t need to change anything about your existing network or WireGuard deployment to use Pro Custodibus. You simply plug Pro Custodibus into a network host to manage that host and all its connections, or unplug it to go back to managing the host as you did before. Start with one or two hosts, and add (or remove) more as you like.
There’s no vendor lock-in with Pro Custodibus. Pro Custodibus adds advanced monitoring and management capabilities on top of the FOSS WireGuard, firewall, routing, and other technologies you already use. So you can bring your own network — and leave with it intact.
If you thought WireGuard was hard to manage: think again. Pro Custodibus simplifies setting up and maintaining even big enterprise WireGuard networks. Everything you need is a click away, in an easy-to-use web GUI.