Overview
Border0 built software that let engineers reach servers, databases and other infrastructure using their work identity. Founder Andree Toonk wanted to reduce the friction of virtual private networks, shared credentials and separate access tools. The Vancouver company announced funding from Andreessen Horowitz, Venrock and Secure Octane in 2022. In March 2026, Tailscale acquired Border0. The product remained available and supported after the deal. [1][2][3]
Founding Story
Toonk began working on the problem in 2020 after years in infrastructure and security roles. He saw teams spread across cloud providers and locations, while their access systems still relied on network boundaries, VPN switches and shared passwords. Border0 was founded in 2021, according to CB Insights. [1][4]
The company's starting idea was practical: an engineer should be able to authenticate with an existing single sign-on account and connect to the specific resource they needed. In October 2022, Toonk announced Border0's funding and described the team's experience at OpenDNS, Cisco, DigitalOcean and Palo Alto Networks. The amount raised was not disclosed in that announcement. [1]
Timeline
- 2020: Toonk began developing a solution to the access problem. [1]
- 2021: Border0 was founded, according to CB Insights. [4]
- 2022: The company announced funding from Andreessen Horowitz, Venrock and Secure Octane. [1]
- 2025: Toonk met Tailscale CEO Avery Pennarun at the RSA Conference and later demonstrated an integration built on Tailscale's networking foundation. [2]
- 2026: Tailscale acquired Border0. The buyer said the product would remain available and supported while the companies worked toward closer integration. [2][3]
Watch: Border0 demonstrates its access controls
What They Built
Border0 connected an engineer's identity to access rules for individual resources. Its connector could discover cloud instances, containers and Kubernetes resources; users could connect to services such as SSH, databases and web applications through authorized access rather than exposing each service directly to the public internet. [1]
The product grew to cover privileged access management: controlling access to sensitive systems and recording what happened during a session. Border0 and Tailscale describe support for SSH, Kubernetes, remote desktop and database access, plus session recording and command or query visibility. These controls complement secure connectivity; they do not eliminate the need to configure permissions and review logs. [2][3]
Market Position
Border0 served engineering teams that needed security controls without a long setup. It competed with existing VPNs, bastion hosts and privileged access tools, including systems that customers could operate themselves. Its pitch combined identity-based access with an interface intended to fit daily engineering work. [1][2]
Tailscale approached the problem from a related direction: secure connectivity between devices and services. After the initial meeting, Pennarun suggested building on Tailscale's tsnet networking library. Toonk later demonstrated an integration, turning a possible partnership into an acquisition discussion. This account comes from the buyer's CEO. [2]
Business Model
Border0 offered a hosted access product for teams. Its site advertised a free starting option, while its documentation described enterprise features such as access policies and session logs. The sources here do not establish a complete historical pricing schedule, revenue or profitability. [5][6]
Traction
Border0 said teams used the product for access to SSH, Kubernetes, databases, web applications and remote desktop. Neither the acquisition announcement nor the sources used here disclose a customer count. BetaKit reported that the entire seven-person Border0 team joined Tailscale, including Toonk. The report does not establish the number of paying customers. [3][7]
Outcome and evolution
On March 17, 2026, Border0 announced that Tailscale had acquired it. The deal terms were undisclosed. Tailscale said Border0 remained available and supported, with no immediate migration required, while the team worked on deeper integration and privileged access management. Toonk joined Tailscale as director of engineering, according to BetaKit. The deal ended Border0's independence, but it did not immediately end the product. [2][3][7]
Key Lessons
Border0 treated usability as part of an access control: an engineer has to be able to use a secure path in daily work. Its integration with Tailscale also gave the buyer a concrete way to assess how the products fit together. The public record supports that sequence; it does not disclose the purchase price or show the return to investors. [1][2]