TunnelNet Halo · Small business network security
Halo sits between every device you own and the internet — phones, laptops, the office — on whatever ISP they happen to be on, wherever they are. It blocks the bad stuff, tells you why, and lets you overrule it.
$15 per device per month, minimum 3 devices. Monitoring, Alerting and Mail are coming to every Halo plan at no extra cost.
Five categories, all on from the start. Each one can be switched off, for the whole network or for a single device.
Sites known to hand out malware or to control infected machines. If a device tries to reach one, the connection never happens.
The services that phone-monitoring apps report back to. A hidden tracker on a phone stops being able to send what it collected.
The companies that follow you from site to site and app to app, building a profile of what you do.
Ad networks are refused before anything loads, on every device, including the apps where you cannot install an ad blocker.
The firms that buy and sell personal data. Their collection points are blocked like everything else.
A filter you cannot see into is a filter you end up switching off. Every block can be explained, and every block can be undone.
Add a site to your allowlist and it goes through, whatever any category says. Your choice beats ours, every time.
Look up anything that was blocked and see which category caught it. If it should not have been, let it through in one tap.
Your analyst runs on your own Halo box. It looks for changes worth your attention, explains what it saw in plain words, and offers a fix you can apply with one click.
“The office laptop started talking to 14 tracking companies today. Most of it is one company. Block this company?”
Press Block and it blocks it, then checks that the block actually took effect before it tells you it is done. Changed your mind? Undo is one click too, and it is checked the same way.
If one of your devices tries to reach a known malware site, we email you: which device, which site, and when. One email per finding, not one per attempt.
Addresses we see scanning and attacking our network are dropped at our network's edge before they reach your address. Your own access to your box is never locked out by it.
The picture of what your devices do is built on your own Halo box, and stays there.
The analysis, the reports and your analyst all run on your box. We do not collect your browsing.
The picture of what your devices do is built on your own Halo box, and we don't keep the sites your devices visit. Coming next: shared protection, where a threat caught on one Halo box is blocked on every box. Only the threat is shared, never anyone's browsing.
Every Halo plan includes its own IPv4 address from our own network. Your devices reach the internet as that address, and nobody else’s traffic shares it. It stays yours for as long as you have Halo.
Each device gets its own connection to your Halo box. It takes a few minutes per device.
Install the free WireGuard app, then scan the QR code for that device from your account page.
Run one command, copied from your account page. Tested on Windows 10 and 11.
Run one command, copied from your account page.
Tested on Debian, Fedora, AlmaLinux, Rocky Linux, openSUSE, Arch and Alpine.
On Linux and Windows, the device goes back to your normal internet connection by itself, and comes back to Halo when the box does. On phones and Macs, for now, switch the tunnel off in the WireGuard app to get back online.
Minimum 3 devices. Up to 40 devices on one plan; for more, email us.
Halo is network security for small businesses. Every phone, laptop and office computer connects through your own private Halo server, so malware, spyware, trackers, ads and data brokers are blocked on any internet connection, wherever the device is.
$15 per device per month, with a minimum of 3 devices ($45 a month). One price for everyone, a dedicated IPv4 address is included, and there is no firewall box to buy.
It does both jobs. Each device connects to your Halo server through the free WireGuard app, like a business VPN, and the Halo server filters what reaches every device, like one firewall for the whole team, in the office or on the road.
Yes. Halo filters the sites your devices look up, and the common ways around a DNS filter, such as switching a device to another public DNS server, are blocked too. Every block shows which category caught it, and you can let any site through in one tap.
iPhone, Android, Mac, Windows 10 and 11, and Linux. Phones and Macs use the free WireGuard app and a QR code; Windows and Linux take one command copied from your account page.
No. The analysis, the reports and your analyst run on your own Halo box. The only thing shared with our central system is a threat signal, such as the address of a malware site one of your devices was stopped from reaching.
Halo is coming soon and is not taking orders yet. To hear when it opens, email support@minakilabs.com.
See every TunnelNet product on the TunnelNet homepage.
Coming soon. Halo is not taking orders yet. To hear when it opens, email support@minakilabs.com.