Network / Pulse Orbit

Pulse Orbit

Managed egress,
region by region.

Keep egress on your own nodes, or hand it to Pulse Orbit region by region. Pin residency. Decide what gets logged, including nothing at all.

Book a demo → See Orbit
Self-hosted exits by default · Orbit is opt-in · logging you control
Opt-in
Region by region
3
Regions on Business
All
Regions on Enterprise
Off
Logging, if you want it

Pulse Orbit · Managed Egress

Global egress, when you want it.

Egress is a choice. Keep it all in your own network with self-hosted gateways and DNS, or hand it to Pulse Orbit: managed exit regions you opt into one by one, each tagged for data residency and health-checked continuously. Smart routing picks the fastest path, live.

·Opt-in by region ·Data-residency tags ·Smart routing built in
pulse-agent · egress simulation
Agent online. Waiting for egress request…
exit policy orbit · region uk-lon · residency UK ✓
● londonscore 94
● frankfurtscore 81
● new yorkscore 47
smart routing → london · tunnel up

Your data, your control

We route it.
We never read it.

Egress from your own nodes, pin the region, and decide what gets logged: full, metadata only, or off. Privacy is the default, not an upsell.

·BYO exit nodes ·Region pinning ·Logging you control

Plans

Orbit unlocks at Business.

Every plan includes self-hosted exits. Business adds three Orbit regions. Enterprise opens the rest.

Core

For small teams getting started with zero trust access.

  • Zero trust access
  • Self-hosted exit nodes
  • Pulse Orbit egress
Contact sales
Most popular

Business

For growing teams who need more control and visibility.

  • Everything in Core
  • Pulse Orbit egress (3 regions)
  • Advanced security & SSO
Contact sales

Enterprise

For organizations with advanced security and compliance needs.

  • Everything in Business
  • All Pulse Orbit regions
  • Custom limits & SLAs
Contact sales

Full feature breakdown on the pricing page →

Better together · Business and up

Network pairs with Pulse Security.

Same policy engine, same fabric. Add DNS-layer threat blocking without adding a single appliance.

  • DNS-layer threat blocking on the gateways you already route through.
  • One policy model: the same identity- and app-aware rules.
  • Unlocks at Business tier and above. No migration, just switch it on.
Explore Security
⛨ pulse-security · live events Active
✕ 09:42:01 crypto-drainer.net · malware feed block
✓ 09:42:03 payments-api → stripe allow
✕ 09:42:06 unmanaged host · posture denied block
✓ 09:42:09 eng-payments · internal-db allow