doxx.net Makes its Private Network Mesh and Peer-to-Peer Comms Free for All

Miami, FL, November 3, 2026. doxx.net today announced a free version of its platform, for developers, homelab operators, and anyone else concerned about their security in a world where AI-written exploits and vulnerabilities are rapidly outpacing traditional protection capabilities and patches.

Now anyone can use the doxx.net next generation encrypted mesh to put their phone, laptops, servers and VPS on a private network of their own, reachable by them and invisible to the internet, with no open ports for anyone to scan or attack. On that same network, they can chat, make voice and video calls and transfer files, true peer-to-peer with no server in the middle, end-to-end encrypted and built into the iOS, macOS, and Android apps.

No email, phone number, or other personal information required. Get started at doxx.net, then tell your agent to read config.doxx.net and do the rest.

Secure your servers: reachable by you, invisible to everyone else

October was a bad month to own a server on a public IP. Two critical PHP flaws became public before fixes shipped on October 21. The same week, Node2Shell exposed applications that decompress attacker-controlled Brotli data to memory corruption and possible remote code execution. Node.js also released fixes on October 21.

Then a Linux kernel flaw showed the risk runs deeper than any application. Researchers demonstrated remote root through a flaw in the Linux IPv4 TCP handshake, using Multipath TCP in the demonstrated exploit. Go 1.24 enables MPTCP by default for ListenConfig on systems that support it, though applications can override that default. By November 2, Ubuntu had published fixes for qualification testing for several supported releases, with Ubuntu 26.10 already fixed. Check the advisory for your release and kernel.

These flaws reach vulnerable code through different paths. PHP and the kernel expose risks in accepting connections; the Brotli bug also matters when an application processes untrusted compressed data. Moving servers onto a private network can reduce public exposure, but the network itself must also be secured. October's Tailworm disclosure showed how a mesh's own SSH feature could be turned against the machines it connected. Tailscale released fixes in v1.104.4 on October 28.

doxx.net is built so that surface never appears. Our client carries your traffic and nothing more. There is no SSH server inside it, so that class of flaw has nowhere to live. OpenSSH, with the keys, accounts and privilege separation you already have, stays exactly as it is, and the mesh just carries the session. Your SSH stays your SSH.

A server connected to doxx.net with the outside world disabled has no exposure to the public internet. Only the devices you choose to allow in can reach it, so the packet that starts an attack like the kernel bug never arrives from the public internet. A server that needs to be public gets a public IP address you lease from doxx.net, but it starts closed and you open the ports you want. Everything else is dropped on our network before it touches the host.

To address the Linux flaw specifically, doxx.net is already filtering the Multipath TCP attack at the network layer before it reaches your device. Every doxx.net user with a port open to the internet is covered, and the Security screen in the app shows each attempt it blocked, with the CVE. Network filtering reduces exposure; it does not replace installing security updates.

A parallel internet of your own

doxx.net is a parallel internet whose only members are the devices, people and agents you let in. We run it on infrastructure we own rather than rent: purpose-built bare-metal servers in 25 locations, our own IP space, our own DNS root and resolvers, and our own certificate authority. Our resolvers have blocked more than 48 million threats since December 2025, now over two million every week, a count any user can watch live in the app.

Somewhat illogically, private networking and private communications have always been separate apps from separate companies. doxx.net puts both on one network of your own. What Tailscale sells as a company is one feature inside it. We’ve run it since day one as one piece of a private internet that also carries your browsing, your calls, and your agents. The mesh is a list of devices you let in, comms is a list of people you let in, and either way the list is yours, not ours. Now available for free, requiring no email, no phone number, nothing to leak.

Barrett Lyon

Founder, doxx.net

What's free

• Your devices on one private network. Your phone, laptop, desktop, home server, and VPS join one encrypted mesh and reach each other from anywhere, invisible to the public internet. The free plan includes up to three devices.
• Access stays secure. Connect to your servers and computers by their private mesh address, from wherever you are, with the SSH client and keys you already use. You stay in charge of who gets in.
• Calls, video, chat, voice memos, and NetDrop file transfer. P2P Communications runs end-to-end encrypted, device to device, with no communications server in the middle and no provider-held call records, message logs, or server-side copies.
• No personal information. No email, no phone number, no password. There's nothing to leak because nothing was collected.

Get started

When you create an account, choose Free Mesh or a Pro plan 30-day trial. When the trial ends, you move to Mesh (free for up to three devices) unless you upgrade. Paid plans start at $6 a month and add internet access through doxx.net, more devices and agent seats.

Get your server off the public internet today. Start at doxx.net, or hand it to your agent at config.doxx.net. Join us at doxx.net/discord.

About doxx.net

doxx.net is the Agentic Defined Networking company, providing a private internet for you and your agents. The platform runs end to end on infrastructure the company owns: its own IP space and ASN, its own DNS root, its own certificate authority, its own local AI models and its own bare-metal servers. doxx.net gives users and their AI agents full control over their internet connectivity, communications, and security. The platform requires no usernames, passwords, email, or phone numbers; accounts are created via proof-of-work. Operating across six continents, doxx.net is headquartered in the United States.

About Barrett Lyon

Barrett Lyon is a serial founder with over 20 years of experience building internet infrastructure and tracking threat actors. He founded Prolexic Technologies, one of the first DDoS mitigation networks, acquired by Akamai. He then went on to found BitGravity (acquired by Tata Communications), XDN (acquired by Fortinet), and Defense.net (acquired by F5). Lyon has worked with law enforcement to track extortion crews across continents.

Media contact

Zenobia Godschalk

zenobia@zagcommunications.com