Pricing

Priced for what
a device actually uses

No hidden fees. No fleet-management contracts. No BGP expertise required. Cancel anytime.

Priced for what a device actually uses

No hidden fees. No long-term contracts. Cancel anytime.

Price is per device. Each device = one globally-routed /64.

Most Devices

Base

128–256 kbps

Telemetry, control traffic, periodic check-ins.

$10/device/yr
  • 128–256 kbps rate cap
  • 1 globally-routed /64 per device
  • Bring your own WireGuard key
  • BGP (AS400053) — real internet routing
  • Usage graphs in your dashboard
  • Email support
Get Started

Bandwidth

1 Mbps+

Cameras, OTA-heavy fleets, real-time control.

$25/device/yr
  • 1 Mbps+ rate cap
  • 1 globally-routed /64 per device
  • Bring your own WireGuard key
  • BGP (AS400053) — real internet routing
  • Usage graphs in your dashboard
  • Priority support
Get Started

Lifetime

128–256 kbps

A capped, numbered cohort — no renewal, ever.

$499one-time
  • 128–256 kbps rate cap
  • 1 globally-routed /64, no expiration
  • Bring your own WireGuard key
  • BGP (AS400053) — real internet routing
  • Usage graphs in your dashboard
  • Limited to 4,096 total
Claim a Slot

Fleet

Custom

Hundreds or thousands of devices, API-provisioned.

Contact us
  • Volume pricing per device
  • API-driven bulk registration
  • Custom rate caps per device class
  • Dedicated support
Contact Sales

Frequently Asked Questions

What hardware do I need?

Anything that can run WireGuard on Linux. A Raspberry Pi, an industrial gateway, a microcontroller board running embedded Linux, a VM — x86 or ARM. If it can generate a WireGuard keypair and run a client, it qualifies.

What network does my device need to be on?

Any network — home WiFi, cellular, a factory floor LAN, satellite. No static IP required, no port forwarding, no business connection required. WireGuard works behind NAT; Synapse handles the addressing and routing from our end.

How does bandwidth shaping work?

Each device's throughput is shaped at the Synapse PoP using Linux traffic control (tc) — not a polite suggestion, an enforced cap. Base is 128–256kbps, Bandwidth is 1Mbps+. This is symmetric — upload and download. Upgrade your plan any time.

Is this a VPN?

Technically yes — traffic travels over a WireGuard tunnel to our PoP. The difference from a typical VPN or overlay mesh: your /64 is globally routed from AS400053, so any IPv6 host on the internet can reach your device directly, without going through a relay. You're reachable as a real internet host, the same way any other server is.

Do I generate the WireGuard key, or do you?

You do. Run wg genkey locally and register only the public key. We never generate, see, or store your device's private key — not even transiently. If you'd rather we generate one for convenience, the web signup form offers that as an option; it's not how the API path works.

What do I actually see on my dashboard?

Your assigned /64, your private ASN, your tunnel IP, and a real usage graph — up/down throughput over time, pulled directly from WireGuard's own transfer counters.

Can I run this alongside existing IPv4?

Yes. Synapse is IPv6-only but does not touch your device's IPv4 setup. It gets both addresses and can reach both IPv4 and IPv6 destinations normally.

I run a fleet of devices behind my own BGP-capable gateway — do I need per-device WireGuard?

Not necessarily. If you already operate a BGP-capable router aggregating many devices, you can peer your gateway directly over GRE instead of running WireGuard per device. See the Advanced page in the footer.

Not ready to register a device yet?

Get an email when there’s something new to know about — no device, no payment, just updates.

No spam. Unsubscribe any time.