Subscribe to GEN
Login to GEN
GENAccess is a fully managed business VPN built on WireGuard. It gives remote staff secure access to your servers, files and internal applications, with a fixed office IP address for SaaS allowlists and per-user control over exactly what each person can reach.
We design, configure and run it for you, including site to site and hybrid cloud routing, so you get least privilege access without the operational burden. It starts at £5 per user per month.
GENAccess is a managed WireGuard network, based on NetBird, with an identity layer (Zitadel) and a policy layer on top. Instead of connecting meaning full network access, we design access around who the user is, what device they are on, and what they are trying to reach. If you are new to the subject, what is a VPN covers the basics.
This is not a self-service VPN kit. We design, configure and manage the service for you, including the more advanced requirements: segmented access, policy rules, exit nodes, and hybrid cloud or on-premises routing. Policies, routes and access rules are built around your real requirements, and your own IT team carries less of the operational load.
The platform can be deployed to connect over HTTPS, so remote users can reach the corporate network from hotels, guest Wi-Fi, mobile networks and other restrictive or heavily filtered networks, where traditional VPN traffic is often blocked or unreliable.
Zero trust means we do not assume a device is trusted just because it is on the VPN. Every access decision is treated as a new request to be evaluated.
WireGuard is a modern VPN protocol known for strong cryptography, a small attack surface and excellent performance, which makes it a good fit for always-on remote access. Its handshakes are fast, connections survive moving between networks, its design is simple enough to audit, and it works well on desktop and mobile devices alike.
An exit node is a routing node on your corporate LAN that carries VPN traffic between remote users and the internal resources they are allowed to reach. A single node suits simpler environments; several can be deployed for load balancing, resilience and failover. Every plan includes one, and more can be added for capacity, redundancy, or to support different sites and network segments.
Routes decide which internal networks a user can reach over the VPN, for example a subnet of file servers, a lab network or a cloud VPC.
Policies define what is allowed. Groups keep management simple by applying those policies to a set of users, and optionally devices.
Instead of the VPN giving you the whole network, we can allow only the specific ports needed: SSH to a bastion, RDP to a jump host, or HTTPS to an internal application.
Posture checks are rules about a device's security state, used to allow, restrict or block access. Typical checks cover operating system version, disk encryption, endpoint protection and device enrolment. This is where zero trust becomes practical: a user can be valid, and their access can still be limited if the device does not meet your baseline.
The same platform can be shaped around very different requirements, from tightly scoped access to one application through to the whole network.
A remote user reaches one Windows server only, typically over RDP, without the wider company network being exposed.
Users reach an internal web application or intranet through a controlled route or proxy path, rather than being placed broadly onto the LAN.
Remote users are limited to one or more file resources, such as a single NAS share, departmental storage or a defined set of file servers.
Some roles need broader connectivity: the entire company network, or a specific subnet such as a finance VLAN, a lab or a cloud segment.
Developers, integrations or support users reach specific internal APIs or microservices only, with no access to unrelated hosts or ports.
Remote workers' internet traffic leaves from a fixed public IP address, for SaaS allowlists, partner access controls and a consistent outbound identity.
GENAccess is priced from £5 per user per month, with one exit node included on every plan. Additional exit or routing nodes are £10 a month each. Every plan is a 12 month contract, billed monthly, and the SLA column shows the service level that comes with it.
| Plan | Users | Exit Nodes | SLA | Description | Monthly | |
| Single | 1 | 1 | SLA3 | Single user with included exit node | £5.00 | |
| Pack5 | 5 | 1 | SLA3 | 5 user pack with included exit node | £24.00 | |
| Pack10 | 10 | 1 | SLA4 | 10 user pack with included exit node | £47.00 | |
| Pack20 | 20 | 1 | SLA4 | 20 user pack with included exit node | £90.00 | |
| Pack50 | 50 | 1 | SLA5 | 50 user pack with included exit node | £215.00 | |
| Pack100 | 100 | 1 | SLA5 | 100 user pack with included exit node | £400.00 | |
| ExtraExitNode | 0 | 1 | SLA3 | Additional exit/routing node | £10.00 |
Larger deployments, resilient multi-node designs and complex routing requirements may need a design of their own; talk to us before ordering. The service is provided under our Managed VPN Policy, alongside the Framework Agreement.
No. GENAccess connects your own staff, contractors and devices to your own business network and systems, securely and under policies GEN design and manage for you. It is business remote access, with a fixed office IP address for SaaS allowlists, rather than a service for browsing the internet from somewhere else.
Yes. A user or group can be limited to a single server, for example one Windows server over RDP and its supporting management ports, without any view of the rest of the network. Access can also be limited to a project or a period of time, and every change is recorded, so there is a history of who was given access to what, and when.
An exit node is a routing node on your corporate LAN that carries VPN traffic between remote users and the internal resources they are allowed to reach. Every plan includes one. Additional exit nodes are £10 a month each, and are used for capacity, resilience and failover, or to reach other sites and network segments.
Every GENAccess plan is a 12 month contract, billed monthly. Pricing starts at £5 per user per month with one exit node included, and additional exit nodes are £10 a month each.
Yes. Remote users' internet traffic can be routed so it leaves from a fixed public IP address, which suits SaaS allowlists, partner access controls and any third party system that trusts a known source address. It can be applied to everyone, or only to chosen users, groups or traffic.
The platform can be deployed to connect over HTTPS-based paths, which helps users connect from hotels, guest Wi-Fi, mobile networks and other restrictive networks where traditional VPN traffic is often blocked or unreliable.
Posture checks are rules about a device's security state, such as operating system version, disk encryption, endpoint protection and enrolment, used to allow, restrict or block access. A valid user on a device that does not meet your baseline can still have their access limited.
No, never. Each user sets their own password when they onboard, and GEN do not create, hold or see it at any point. Managing the service does not require knowing anybody's password.
No. Every peer, meaning each device connected to the VPN, is tied to the user who enrolled it. A different user cannot sign in on that peer with their own credentials and borrow its connection or its access, so access always follows the person, not the device they happen to be using.
No. GENAccess is fully managed. GEN design, configure and run the service, including onboarding, policy design, routing, exit nodes, and site to site and hybrid cloud requirements, with UK based support.
Tell us how many users you have, where your applications live (on premises, in the cloud, or both), and what you need to protect, and we will design the access around it.
GENAccess runs over any of our business connectivity.
