Our verdict: a near-zero-config WireGuard mesh VPN whose client apps are open source, though the hosted coordination server that runs the mesh is proprietary — Headscale is an open-source alternative if you want to self-host the control plane.
Tailscale is a WireGuard-based mesh VPN that privately connects your own devices with almost no configuration, using identity-based sign-in and NAT traversal so there is no port-forwarding or firewall changes to manage. It runs on Windows, macOS, Linux, iOS and Android and is developed by Tailscale Inc. (Canada).
Being honest about scope: the CLIENTS (the tailscaled daemon, CLI and most desktop code) are open source under BSD-3-Clause, but the coordination/control plane — the hosted SaaS that assigns IPs, distributes public keys and enforces policy — is proprietary and closed source. Traffic between your devices is end-to-end encrypted over WireGuard with private keys that never leave the device, while the coordination server sees connection metadata. Headscale is a separate, community-built open-source control server you can self-host to avoid the SaaS entirely.