SamNet
Your own private internet — secure, invisible, and fully under your control.
Join the SamNet BetaPrivate networking that just works.
SamNet is the foundation of every SelfHostSam service. It gives you a fully private VPN where only approved devices can connect, and nothing is ever exposed to the public internet.
Unlike most VPNs, you stay in control: no third-party relays, no metadata leaks, and all traffic stays private.
Your personal SamHub sits at the center of a hub-and-spoke network: your private internet, on your terms.
How It Works
SamNet creates a secure, encrypted tunnel between your devices and services. You control who can connect, and all traffic is routed through your private network.
No open ports, no third-party relays, no data leaks. Just a simple, secure connection to your services.
Only approved devices can reach your private network — no open ports, no third-party relays.
Features
- Zero-trust VPN, powered by WireGuard, enhanced by Sam, simplified for you
- Works on macOS and Windows (Linux and mobile coming soon)
- Automatic setup: no config files, no terminal, just download the app and log in
- Invite-only access: you control who joins, with instant revocation
- Runs silently in the background, auto-starts with your device
- Built-in name resolution and service discovery
- No tracking, no logging, no data collection
- All hosted inside the EU and your private network: not in Asia, not in the US
Your services (NAS, Vault, Git, etc.) live inside SamNet.
Only you and your trusted devices can reach them.
No open ports, no firewall rules, no nonsense.
Secure by default. Simple by design. Just works.