doxx.net Makes its Private Network Mesh and Peer-to-Peer Comms Free for All

doxx.net today announced a free version of its platform, for developers, homelab operators, and anyone else concerned about their security in a world where AI-written exploits and vulnerabilities are rapidly outpacing traditional protection capabilities and patches. Now anyone can use the doxx.net next generation encrypted mesh to put their phone, laptops, servers and VPS on a private network of their own, reachable by them and invisible to the internet, with no open ports for anyone to scan or attack. On that same network, they can chat, make voice and video calls and transfer files, true peer-to-peer with no server in the middle, end-to-end encrypted and built into the iOS, macOS, and Android apps.

No email, phone number, or other PII required. Get started at doxx.net, then tell your agent to read config.doxx.net and do the rest.

Secure Your Servers: Reachable by You, Invisible to Everyone Else

October was a bad month to own a server on a public IP. Two critical PHP flaws leaked before a fix existed and were being exploited within days. Days later, Node2Shell surfaced a memory bug in the Brotli decoder that Node.js ships with, and CISA confirmed attacks on that one too. Then a Linux kernel flaw showed the risk runs deeper than any application. Researchers demonstrated remote root on servers running Multipath TCP, which newer Go servers turn on by default, and several major distributions still had no fixed kernel when this release went out.

Different layers, one requirement: a server the internet can reach. The usual answer is to pull servers onto a private network, but that only helps if the network itself does not become the target: October’s Tailworm disclosure, since patched, showed how a mesh’s own SSH feature could be turned against the machines it connected.

doxx.net is built so that surface never appears. Our client carries your traffic and nothing more. There is no SSH server inside it, so that class of flaw has nowhere to live. OpenSSH, with the keys, accounts and privilege separation you already have, stays exactly as it is, and the mesh just carries the session. Your SSH stays your SSH. A server connected to doxx.net with the outside world disabled has no exposure to the public internet. Only the devices you choose to allow in can reach it, so the packet that starts an attack like the kernel bug never arrives, and the box waits out a patch without ever being exposed. A server that needs to be public gets a public IP address you lease from doxx.net, but it starts closed and you open the ports you want. Everything else is dropped on our network before it touches the host. To address the Linux flaw specifically, doxx.net is already filtering the Multipath TCP attack by filtering on the network layer before it reaches your device. Every doxx.net user with a port open to the internet is covered, and the Security screen in the app shows each attempt it blocked, with the CVE.

A Parallel Internet of Your Own

doxx.net is a parallel internet whose only members are the devices, people and agents you let in. We run it on infrastructure we own rather than rent: purpose-built bare-metal servers in 25 locations, our own IP space, our own DNS root and resolvers, and our own certificate authority. Our resolvers have blocked more than 48 million threats since December 2025, now over two million every week, a count any user can watch live in the app.

“Somewhat illogically, private networking and private communications have always been separate apps from separate companies,” said Barrett Lyon, founder and CEO of doxx.net. “doxx.net puts both on one network of your own. What Tailscale sells as a company is one feature inside it. We’ve run it since day one as one piece of a private internet that also carries your browsing, your calls, and your agents. The mesh is a list of devices you let in, comms is a list of people you let in, and either way the list is yours, not ours. Now available for free, requiring no email, no phone number, nothing to leak.”

What’s Free

  • Your devices on one private network. Your phone, laptop, desktop, home server, and VPS join one encrypted mesh and reach each other from anywhere, invisible to the public internet.
  • Access stays secure. Connect to your servers and computers by their private mesh address, from wherever you are, with the SSH client and keys you already use. You stay in charge of who gets in.
  • Calls, video, chat, voice memos, and NetDrop file transfer. P2P Communications runs end-to-end encrypted, device to device, with no communications server in the middle and no provider-held call records, message logs, or server-side copies.
  • No personal information. No email, no phone number, no password. There’s nothing to leak because nothing was collected.

Get Started

When you create an account, choose Free Mesh or a Pro plan 30-day trial. When the trial ends, you move to Mesh (free for up to three devices) unless you upgrade. Paid plans start at $6 a month and add internet access through doxx.net, more devices and agent seats.

Get your server off the public internet today. Start at doxx.net, or hand it to your agent at config.doxx.net. Join us at doxx.net/discord.

About doxx.net

doxx.net is the Agentic Defined Networking company, providing a private internet for you and your agents. The platform runs end to end on infrastructure the company owns: its own IP space and ASN, its own DNS root, its own certificate authority, its own local AI models and its own bare-metal servers. doxx.net gives users and their AI agents full control over their internet connectivity, communications, and security. The platform requires no usernames, passwords, email, or phone numbers; accounts are created via proof-of-work. Operating across six continents, doxx.net is headquartered in the United States.

About Barrett Lyon

Barrett Lyon is a serial founder with over 20 years of experience building internet infrastructure and tracking threat actors. He founded Prolexic Technologies, one of the first DDoS mitigation networks, acquired by Akamai. He then went on to found BitGravity (acquired by Tata Communications), XDN (acquired by Fortinet), and Defense.net (acquired by F5). Lyon has worked with law enforcement to track extortion crews across continents.

Media gallery