How the Vexaro Mesh design compares
Evaluating a mesh or SD-WAN overlay? This page compares the planned design of Vexaro Mesh (in development) with Tailscale, NetBird and ZeroTier, which ship today, one capability at a time. Each comparison also says where the other product is a strong fit.
What will make Vexaro Mesh different
A few things the Vexaro Mesh design leads with. All of them are planned; none has shipped yet.
Planned per site, not per head or device
Vexaro Mesh is planned to bill per connected site or gateway ($49 per site for up to five sites, $39 per site on the unlimited plan), however many users or devices sit behind it. Tailscale bills per user seat, NetBird per user plus per-machine overage, and ZeroTier a flat tier plus per-device overage. Cost would follow locations, not headcount.
Sites and gateways as the unit
Gateways at offices, data centers and clouds are designed to build a full mesh themselves, so every site reaches every other directly. Tailscale, NetBird and ZeroTier lead with an overlay of per-device or per-user agents, which is a different unit of the network.
Direct first, relay only as a fallback
Vexaro Mesh is designed to connect peers directly and to fall back to a relay only when a direct tunnel can't form. Tailscale (DERP), NetBird (Coturn) and ZeroTier (roots) use the same model today, so this is common ground rather than an advantage.
A self-hosted controller, planned for Enterprise
On Enterprise, the controller and keys are planned to run inside your own perimeter. NetBird ships a first-class open-source control plane too; on Tailscale self-hosting means the third-party Headscale (scoped to a single tailnet), and ZeroTier documents private moons (self-hosted roots) as no longer recommended and not supported under its SLA.
Comparisons set publicly documented competitor capabilities (sources read September 22, 2026) against the Vexaro Mesh design described on this site; Vexaro Mesh is in development and has not shipped. Every rival uses a relay only as a peer-to-peer fallback, and those relays carry encrypted traffic they cannot decrypt. Prices and protocols change, so check each vendor's current pages before deciding.