Secure remote access for teams, sites and infrastructure
WZ-IT designs, integrates and operates secure network access for companies: remote access, site-to-site connectivity, cloud and private-cloud integration, customer access and access to internal systems - with NetBird, WireGuard, SSO, policies, monitoring and operations.
Zero Trust & SSO
Roles, groups and granular access rules instead of full access.
Sites, Cloud & Systems
Secure connections for sites, cloud, Proxmox, Kubernetes and internal systems.
Self-hosted & Operated
Self-hosted or operated in Europe - with monitoring, updates and support.
NetBird is a trademark of NetBird GmbH. WZ-IT is an official NetBird reseller. Commercial Starter and Enterprise can be purchased through WZ-IT where required; vendor licensing and WZ-IT services are itemised separately.
Whether you start with an assessment, move straight to implementation or hand over operations - every starting point has a defined scope and a stated price.
The complete service catalogue lists further audits, managed services, local systems and project engagements with their respective pricing or scoping model.
All prices are net and exclude statutory VAT. The offers are addressed to businesses.
Secure access as part of your infrastructure - not as an isolated VPN
We treat network access not as a single tool, but as a layer of your infrastructure. What matters are identity, devices, routes, policies, monitoring and operations. Depending on the environment, we use NetBird, WireGuard, classic VPNs, firewalls, routing and zero-trust concepts so they fit your systems.
Identity & Devices
SSO, groups, roles, device management and access by user, team or purpose.
Least privilege, access to specific systems, MFA, admin access, customer access and auditability.
Operations & Transparency
Monitoring, updates, logs, incident response, documentation and regular review processes.
Typical projects
What we typically work on
Concrete secure access projects at the intersection of networking, infrastructure and operations.
Remote access for teams and administrators
Secure access to internal systems, admin interfaces, servers, Proxmox, Kubernetes, databases or business applications.
Site-to-site connectivity
Connect multiple offices, sites, plants or edge systems securely via controlled routes.
Cloud and private-cloud integration
Bring public cloud, private cloud, Proxmox, Kubernetes and on-premise systems into a clean access concept.
Remote access for customers and partners
Provide external access to selected systems, portals or plants - without opening the entire network.
HMI and industrial access
Secure access to distributed plants, HMIs, gateways or service systems for operations, maintenance and support.
Replace legacy VPN
Gradually move existing VPN gateways, firewall rules and manual access into a more modern secure access model.
Services
From architecture to operations
We do not just set up a VPN tool. We design, integrate and operate secure access as part of your infrastructure.
Secure Access Consulting & Architecture
We clarify which users, devices, sites, services and networks need to be connected - and which model fits technically and organizationally.
NetBird Setup & Self-Hosting
We set up NetBird self-hosted or on European infrastructure, including management service, signal/relay, TLS, DNS and base configuration. As an official reseller, we can supply Commercial Starter and Enterprise directly where required.
SSO & Identity Integration
Integration with existing identity providers via OAuth/OIDC, groups, roles, MFA and access by teams or responsibilities.
Network Routes & Site-to-Site
We connect existing networks, cloud resources, sites and legacy systems via controlled routes and routing peers.
Client Rollout & Migration
Gradual rollout for employees, administrators, service providers or sites with test phases, documentation and a transition concept.
Monitoring & Operations
Monitoring of control plane, relays, routes, availability, updates, certificates and critical access paths.
Assessment
Not every access scenario needs a mesh VPN
We only recommend NetBird or a comparable mesh VPN when it fits the infrastructure, the team and the operating model.
A mesh VPN makes sense when:
multiple users, devices or sites need to be connected securely
classic VPN gateways become a bottleneck
access should be controlled more finely than "in the VPN or not"
cloud, private cloud and on-premise systems need to be connected
external service providers or customers need limited access
self-hosting and data control matter
operations, monitoring and clear policies are wanted
A mesh VPN is often not the best solution when:
only a single server needs to be administered
no ongoing operational responsibility is planned
anonymous consumer VPN usage is what you are looking for
existing firewall or VPN solutions already cover the need cleanly
access cannot be documented or clarified organizationally
Our goal is not to introduce NetBird everywhere - but to choose the right access layer for your infrastructure.
Building Blocks & Expertise
Five building blocks for secure access - explained in detail
Depending on the scenario, we use different tools. The expertise pages cover architecture, self-hosting, positioning and operations in detail.
For companies that want NetBird or a comparable secure access solution not just set up, but operated long-term. Required NetBird licences can be purchased through WZ-IT as an official reseller.
Included depending on setup:
operation of the NetBird control plane
updates and security patches
monitoring and alerting
SSO, groups and policy adjustments
support for client rollouts
routes, relay servers and site connectivity
incident response and technical support
Price
from €349.90 excl. VAT / month
including the Essential service level; Business, Priority, Production and Critical are available. Vendor licences are shown separately.
Briefly describe who needs access to which systems, sites, or networks.
Frequently asked questions about secure access & VPN
Answers to the most important questions about architecture, NetBird, operations and fit.
Gateway-based VPNs typically route connections through central entry points. NetBird attempts to establish direct WireGuard connections between peers and can use relays where required. Access is managed through devices, groups and policies; actual performance and resilience depend on architecture and network conditions.
No. We assess what stays and what gets replaced. We often combine NetBird with existing firewalls, routing and SSO - and phase out legacy access step by step without interrupting operations.
After an inventory, we set up the new control plane, identity integration, routing peers and policies for a test group. The remaining migration proceeds in risk-based waves; legacy access remains as a fallback only for as long as defined by the agreed cutover and rollback concept.
Yes. The NetBird control plane and infrastructure components required for the deployment can run on your own or agreed European infrastructure. We design setup, identity integration, routing, backups, monitoring and operations for the deployed version and edition.
Via network routes: a routing peer in the respective network makes servers, plants or entire subnets reachable without installing a client on every system. This is particularly suitable for legacy systems, HMIs and site-to-site connectivity.
With granular policies: external users get access to exactly the systems they need - by user, group, device or service, traceable and revocable at any time. The rest of the network stays closed.
Yes. With Managed Secure Access we take over updates, security patches, monitoring, alerting, policy maintenance, client rollouts and incident response - with clear responsibilities and an SLA.
Managed NetBird: from €349.90 excl. VAT / month. This includes the Essential service level. Business, Priority, Production and Critical can be added according to the required response. WZ-IT does not automatically bill per user or device; vendor licences, onboarding and special infrastructure are itemised separately.
Yes. As an official NetBird reseller, we can supply Commercial Starter and Enterprise directly. We first assess whether the commercial capabilities are actually required; Community Edition remains an option. Licence, infrastructure and operating services are itemised separately in the proposal.
Knowledge
Further guides
In-depth knowledge from our remote access knowledge base.
This page covers architecture and connectivity. Replacing existing access, ongoing operations and publishing internal applications remain separate areas of responsibility.
“WZ-IT moved our studio infrastructure from decentralised individual devices to a central platform: every site is securely connected via VPN, new devices are onboarded automatically and an entire site is provisioned from a template, without manual steps on location. What impressed me most is the breadth and depth of their knowledge: Timo and Robin are not a typical IT provider who sets up a server and leaves. The two of them think their way into highly complex infrastructure and software topics, work through every requirement we put in front of them, and build networking, provisioning and operations so that everything fits together in the end. WZ-IT is an excellent partner for complex software, network and architecture projects.”
“Professional, honest and technically thoroughly sound: WZ-IT set up our Proxmox and backup infrastructure securely and future-proof. The consulting from Timo and Robin was objective and needs-driven, the implementation smooth and the final documentation exemplary. You can tell immediately that business-critical infrastructure is thought through holistically from the outset here and implemented with clear ownership.”
Pascal Block
Project Manager, Stadtwerke Brühl GmbH
Stadtwerke Brühl - municipal energy and infrastructure utility.
“Communication with WZ-IT was open, friendly and professional from the very beginning. Mr. Wevelsiep and Mr. Zins responded to every one of our questions patiently, promptly and respectfully, and contributed their own suggestions and good ideas on how to modernize our server infrastructure and adapt it even better to our needs. Throughout, WZ-IT consistently kept our need for data sovereignty and GDPR compliance in mind. Even short-notice adjustments and change requests from our side were implemented quickly and patiently and integrated consistently into the overall concept. From planning to the final handover, every step was documented transparently and comprehensively - so if a provider change should ever become necessary, the documentation would let us onboard a successor into our infrastructure very quickly. We are extremely satisfied with WZ-IT and hope to continue working together for a long time.”
Christoph Mußmann
Project Officer, DGHO e.V.
DGHO - German Society for Hematology and Medical Oncology.
“I got to know Timo and Robin as dedicated and professional partners who make a lot of things possible for their clients that initially seem impossible. I felt very well advised. The services offered have thoroughly convinced me. (translated)”
GermanyLocal AI IntegrationTechnical IntegrationImplementation
“While looking for a partner to integrate a local AI solution, we came across Timo and Robin - and could not have made a better decision.
They quickly understood our requirements and solved technical challenges competently and pragmatically.
We were particularly impressed by the straightforward collaboration, their high level of expertise and the speed of implementation.
We are delighted to have Timo and Robin at our side as reliable business partners and look forward to our next projects together. (translated)”
Henrik Jeche
Head of IT Administration
ml&s - full-service provider for the electronics industry.
“With Timo and Robin, you're not only on the safe side technically - you also get the best human support!
Whether it's quick help in everyday life or complex IT solutions: the guys from WZ-IT think along with you, act quickly and speak a language you understand. The collaboration is uncomplicated, reliable and always on an equal footing. That makes IT fun - and above all: it works!
Big thank you to the team! (translated)”
Sonja Aßer
Data Manager, ARGE
ARGE Neue Medien - master data & digital standards for plumbing and building technology.
“I recently worked with Timo and the WZ-IT team, and honestly, it turned out to be one of the best tech decisions I have made for my business. Right from the start, Timo took the time to walk me through every step in a simple and calm way. No matter how many questions I had, he never rushed me. The results speak for themselves. With WZ-IT, we reduced our monthly expenses from $1,300 down to $250. This was a huge win for us.”
Aleksandr Shuliko
CTO, EVA Real Estate
EVA Real Estate - leading real-estate agency in Dubai.
“WZ-IT manages our Proxmox cluster reliably and professionally. The team handles continuous monitoring and regular updates for us and responds very quickly to any issues or inquiries. They also configure new nodes, systems, and applications that we need to add to our cluster. With WZ-IT's proactive support, our cluster and the business-critical applications running on it remain stable, and high availability is consistently ensured. We value the professional collaboration and the noticeable relief it brings to our daily operations.”
“WZ-IT provided very competent support in implementing our server and virtualization infrastructure. As part of the project, a Proxmox-based virtualization environment was set up along with a virtual machine for our application systems. Additionally, a structured backup concept was implemented. A particular focus was on security: the setup of a VPN tunnel and the clean implementation of encryption and access concepts were professionally executed. The structured consulting as well as the reliable and swift implementation deserve special mention. We are very satisfied with the services provided and are happy to recommend WZ-IT.”
John Hellmerichs
Managing Director, AInergy GmbH
AInergy - consultancy for energy and facility management.
“We have had very good experiences with Mr. Wevelsiep and WZ-IT. The consultation was professional, clearly understandable, and at fair prices. The team not only implemented our requirements but also thought along and proactively. Instead of just processing individual tasks, they provided us with well-founded explanations that strengthened our own understanding. WZ-IT took a lot of pressure off us with their structured approach - that was exactly what we needed and is the reason why we keep coming back. (translated)”
Matthias Zimmermann
Managing Director, Annota GmbH
Annota - healthtech startup with an AI documentation assistant.
“Timo and Robin from WZ-IT set up a RocketChat server for us - and I couldn't be more satisfied! From the initial consultation to the final implementation, everything was absolutely professional, efficient, and to my complete satisfaction. I particularly appreciate the clear communication, transparent pricing, and the comprehensive expertise that both bring to the table. Even after the setup, they take care of the maintenance, which frees up my time enormously and allows me to focus on other important areas of my business - with the good feeling that our IT is in the best hands. I can recommend WZ-IT without reservation and look forward to continuing our collaboration! (translated)”
“Counting on WZ-IT team was crucial, their expertise and solutions gave us the pace to deploy in production our services, even suggesting and performing improvements over our configuration and setup. We expect to keep counting on them for continuous maintenance of our services and implementation of new solutions.”
Gabriel Sanz Señor
Managing Director, Odiseo Solutions
Odiseo Solutions - software engineering for the space industry.
Whether a specific IT challenge or just an idea - we look forward to the exchange. In a brief conversation, we'll evaluate together if and how your project fits with WZ-IT.