Catalyst Networks

Secure overlay networks, managed effortlessly.

Catalyst Networks is a management platform for Nebula mesh networks. Deploy encrypted tunnels across any infrastructure — cloud, on-prem, or hybrid — with centralized certificate authority, node management, and security policies.

Everything you need to manage your network

Stop juggling config files and SSH sessions. Catalyst Networks gives your team a single control plane for every Nebula node.

Certificate Authority
Generate and manage Nebula certificates from a centralized CA. Issue, revoke, and track expiration across your entire fleet.
Node Management
Register nodes with QR codes or CLI. Monitor status, IP assignments, and certificate lifecycle from a single dashboard.
Security Policies
Define firewall rules and security groups. Control which nodes can communicate with fine-grained inbound and outbound policies.
Multi-Tenant Organizations
Create isolated organizations with role-based access. Invite team members as owners, admins, or members.
Webhook Notifications
Get notified when nodes register, certificates expire, or policies change. Integrate with Slack, PagerDuty, or any HTTP endpoint.
REST API
Automate everything. Provision nodes from deploy scripts, integrate with CI/CD, or build custom tooling against a full OpenAPI spec.

Built for how infrastructure teams actually work

Deploy a new node in seconds

Generate a registration token, add it to your provisioning script, and every new server joins the network on first boot. No manual certificate management.

$ catalyst register --org acme --name web-prod-01
Generating certificate... done.
Configuring Nebula tunnel... done.
Node web-prod-01 is now online.

Manage from anywhere

The web dashboard gives your team full visibility and control over every node, certificate, and security policy in the network.

  • Monitor all nodes across organizations
  • Rotate certificates before they expire
  • Update security policies with instant propagation
  • Audit all changes with full history

And there’s more

QR Code Provisioning
Generate QR codes for mobile node enrollment. Scan, connect, done.
Audit Logging
Every action is tracked with full history. See who changed what and when.
Certificate Lifecycle
Automated expiration warnings. Bulk renewal. Never lose connectivity to an expired cert.
Team Collaboration
Invite your team with email invites. Assign roles per organization for least-privilege access.

Ready to secure your network?

Get started with managed cloud, or deploy the open-source Community Edition on your own infrastructure.