# Defined Networking

> Defined Networking builds managed overlay networking products powered by Nebula, the
> open-source overlay networking protocol. Hosts connect to each other over direct,
> mutually authenticated, end-to-end encrypted peer-to-peer tunnels, with identity and
> access enforced by certificates and a default-deny host firewall.

Defined Networking is a hosted control plane for Nebula. It issues certificates, distributes
network configuration and firewall policy to enrolled hosts, and operates managed lighthouses
that help hosts discover each other and traverse NAT. Application traffic flows directly
between customer hosts and not through the control plane; private keys are generated on each
host and are never transmitted to Defined Networking.

## Security

- [Security overview](https://www.defined.net/security/): How the service is secured, and answers to common security-review questions.
- [Security whitepaper](https://www.defined.net/security/whitepaper/): Full technical description of the trust model, key custody, endpoint-to-endpoint and endpoint-to-service authentication, certificate authority operations, and platform security.
- [Security contact](https://www.defined.net/.well-known/security.txt): Where to report a suspected vulnerability.

## Product

- [Documentation](https://docs.defined.net/): Guides and reference for the Defined Networking service.
- [Nebula documentation](https://nebula.defined.net/docs/): Protocol and configuration reference for open-source Nebula.
- [Pricing](https://www.defined.net/pricing/): Plans and limits. Up to 100 hosts free.
- [Downloads](https://www.defined.net/downloads/): Client packages for supported platforms.

## Solutions

- [Secure remote access](https://www.defined.net/solutions/remote-access/): Reaching private servers and services without a traditional VPN concentrator.
- [Multi-cloud deployment](https://www.defined.net/solutions/multi-cloud-deployment/): Connecting hosts across cloud providers and regions.
- [Drop-in encryption](https://www.defined.net/solutions/drop-in-encryption/): Encrypting traffic between existing services without changing them.
- [IoT and fleet telematics](https://www.defined.net/solutions/iot-and-fleet-telematics/): Connecting distributed devices behind NAT and CGNAT.

## Comparisons

- [Comparisons index](https://www.defined.net/compare/): Nebula and Defined Networking compared with other networking tools, including WireGuard, OpenVPN, and Tailscale.

## Legal

- [Data Processing Agreement](https://www.defined.net/legal/dpa/): How personal data is processed on a customer's behalf.
- [Subprocessors](https://www.defined.net/legal/subprocessors/): Third parties involved in delivering the service.
- [Service Level Agreement](https://www.defined.net/sla/): Availability commitment.
- [Privacy Policy](https://www.defined.net/privacy/): What is collected and why.
- [Terms of Service](https://www.defined.net/terms/)

## Optional

- [Blog](https://www.defined.net/blog/): Engineering and product writing, including deep dives on Nebula internals.
- [About](https://www.defined.net/about/): The company and the team.
- [Contact](https://www.defined.net/contact/): Sales and general enquiries.