Tailsnitch
Free open-source tool that scans a Tailscale network for security misconfigurations — overly open access rules, weak auth settings, risky device permissions — and tells you exactly what to fix.
🔗 Visit Tailsnitch
Description
Tailscale makes it easy to connect devices into a private network, but 'easy to set up' and 'securely configured' aren't the same thing — a permissive access rule added for convenience during setup can quietly stay open forever. Tailsnitch is like a home inspector for that network: it goes through your configuration checking dozens of specific things (who can reach what, whether logins are locked down properly, whether devices are set up safely) and hands you a list of exactly what's wrong and how to fix it.
Tailsnitch runs 52 distinct security checks across seven categories — access control, authentication, devices, network, SSH, logging and DNS — and supports both a safe dry-run mode and an interactive mode that helps fix issues directly. It authenticates via OAuth or API key, exports results as JSON or CSV, plugs into CI/CD pipelines for continuous checking, and can generate SOC 2 evidence reports mapped to Common Criteria for teams that need to prove compliance. It's built in Go, MIT-licensed, and made by Adversis, a security consulting firm.
💬 Our review
The short version: Tailsnitch is a free, focused security scanner for one specific and easy-to-overlook problem — Tailscale networks quietly drifting into insecure configurations — and it's a sensible five-minute addition to any team already using Tailscale.
Built by a security consulting firm rather than a hobbyist project gives some confidence in the checks being genuinely security-relevant rather than superficial, and the SOC 2 evidence export is a real practical bonus for teams already doing compliance work who'd otherwise document this manually. Being free and open-source under MIT removes any cost barrier to trying it. The obvious limitation is scope: it only audits Tailscale, so it doesn't replace a broader security-scanning tool if your infrastructure spans more than Tailscale-managed connectivity — it's a narrow, well-executed point solution, not a general security platform.
💰 Pricing
📊 Global score
🤖 AI-enriched data
Free and open source (MIT License).
Pros
52 distinct security checks across access, auth, device, network, SSH, logging and DNS
Free and open source (MIT), built by a security consulting firm
SOC 2 evidence export with Common Criteria mappings
CI/CD integration plus a safe dry-run mode before making changes
Cons
Scope limited to Tailscale networks only — not a general security scanner
Requires Tailscale API access to run audits
No hosted/managed version — self-run tool, not a SaaS dashboard