Built so you can trust it with your code.

• Your code never leaves.

  Tunnet never uploads your code: each machine works on its own copy of the repository, and only notes and job requests travel between the room's machines.

• Rooms are sealed end to end.

  No central server holds a room. Its notes are sealed between the room's machines, and nothing in the middle can read them.

• Risky steps wait for you.

  A push, a deletion or a network fetch stops for your green light. Auto-approve lets a clean job's steps through only inside a sandbox.

• Signed releases, telemetry you can read.

  Every release is signed and checked before it installs. Telemetry is anonymous counts the installer asks you about first, and it shows every field it would send.