NoPorts
They can't attack what they can't see
About NoPorts
NoPorts is a zero trust secure remote access platform from Atsign that eliminates exposed network ports entirely. It uses cryptographic authentication and end-to-end encryption to make SSH, RDP, VNC, SMB, and MQTT connections invisible to attackers, with no inbound ports, no VPN, and no public IPs required.
Pros & Cons
Pros
- Removes entire classes of attacks by eliminating exposed ports
- Works across firewalls, CGNAT, and Starlink without port forwarding
- Supports multiple protocols (SSH, RDP, VNC, SMB, MQTT) in one platform
- Genuinely free tier suitable for home labs and personal IoT projects
- Open source SDK enables custom integrations and auditability
Cons
- Concept of atSigns and the atPlatform has a learning curve for new users
- Per-device pricing on the Professional plan can add up for larger fleets
- Smaller community and ecosystem compared to traditional VPN or Tailscale-style tools
- Enterprise features like SSO and advanced policy require custom pricing
Key Features
No Open Ports
Eliminates all exposed listening ports so devices and servers are invisible to internet scanners and attackers.
Cryptographic Authentication
Every connection is authenticated with cryptographic keys tied to a unique global identity (atSign), not IP addresses or passwords.
End-to-End Encryption
Traffic is encrypted device-to-device with keys stored locally on each endpoint, so no intermediary (including Atsign) can decrypt sessions.
Protocol Agnostic
Supports SSH, RDP, VNC, SMB file sharing, and MQTT, replacing multiple bastion and VPN tools with one platform.
Zero Trust Network Access
Implements ZTNA principles with per-device identity and policy enforcement instead of perimeter-based trust.
CGNAT and Starlink Friendly
Works through CGNAT, mobile networks, and Starlink connections without needing port forwarding or static IPs.
VPN Replacement
Provides direct, segment-of-one connections that remove the lateral movement risk inherent in traditional VPNs.
AI and MCP Server Security
Protects private AI workloads and MCP servers by keeping them off the public internet while still allowing authorized remote access.
Open Source SDK
Built on the open source atPlatform SDK, allowing developers to embed NoPorts connectivity into custom applications and devices.
Pricing
- 2 devices
- Auto-generated atSigns
- Non-commercial use only
- Home labs, hobby and educational projects
- Billed annually
- 2 devices included
- Add up to 8 more devices at $10/mo each
- Custom atSigns
- Personal or commercial use
- Free trial available
- Unlimited devices
- Custom integrations
- Self-hosted options
- Policy management
- Custom atSigns
- Priority support
Best For
Secure IoT Device Access
Reach remote IoT devices behind CGNAT or restrictive networks without exposing them to the internet.
VPN Replacement for Remote Teams
Replace legacy VPNs with per-device zero trust connections that limit lateral movement.
Private AI and MCP Server Protection
Keep internal AI workloads and MCP servers off the public internet while still serving authorized clients.
Remote SSH and RDP for DevOps
Give engineers SSH and RDP access to servers and workstations without bastions or open ports.
Starlink and Edge Connectivity
Manage edge devices on Starlink or mobile networks where inbound connections are normally impossible.
Similar Tools
Optery
Remove your personal information from the internet
CrateDB
Distributed SQL database for real-time analytics at any scale
CrowdSec
Collaborative threat intelligence powered by 70,000+ security engines
Faraday
All-in-one security platform for vulnerability management and pentesting
Firezone
Zero trust access that scales
Netmaker
Zero trust networking platform powered by WireGuard