Business access without the distance.
Give people access to the networks they need, connect office locations and manage customer organizations from one platform. Reefspan works with your identity provider and connects through the closest healthy gateway region.
Reefspan Access for Windows, macOS, iPhone and Android.

One platform. Three ways to connect.
Give employees remote access, connect business locations or manage access for multiple customers.

Remote access for your team
Reefspan Access uses one-time activation codes, device-bound keys and MFA through your organization's identity provider.
For remote teams
Site-to-site for your offices
Connect compatible office firewalls with IPsec IKEv2 and configure static, BGP or OSPF routing.
For branch offices
One workspace for your customers
MSPs and resellers manage multiple customer organizations from one reseller workspace.
For MSPs and IT providersKeep your identity provider. Control the networks.
Your existing identity provider handles sign-in and MFA. Reefspan handles device activation, gateway connectivity and network access grants.

Use your identity provider
Configure Entra ID, Okta, Google or another OIDC provider for sign-in and MFA.

Activate each device
Employees install Reefspan Access and enter a one-time activation code. Each activated device uses a device-bound key.

Grant the networks they need
Routing groups define network access. Changes apply to connected users within a minute without reconnecting.
The closest healthy gateway. Selected automatically.
Reefspan Access chooses the closest healthy gateway region. If that region becomes unavailable, the app automatically fails over to another healthy region in under a minute.
- Live gateways in New Jersey, Miami and Mexico City
- Automatic selection of the closest healthy region
- Automatic regional failover in under a minute
Connected
Through Miami
Tap to disconnect
Preview a gateway region
Illustrative Reefspan Access preview. Connection states and gateway changes are simulated here; the actual app reflects its live connection.
Connect the places your business depends on.
Reefspan connects compatible office firewalls using site-to-site IPsec IKEv2. Manage existing tunnels in place, support dual-WAN failover and use static, BGP or OSPF routing to match your network.
Supported firewall families include UniFi, Fortinet, pfSense, Meraki and SonicWall. Routing features and connection requirements depend on your firewall model, firmware and configuration.

The controls you need to manage access.
Define network permissions, choose how traffic is routed and see what is happening across connected sessions.
Routing groups
Grant people access to specific networks. Changes apply to connected users within a minute without reconnecting.
Full or split tunnel
Choose full-tunnel or split-tunnel routing for each organization.
Custom DNS
Configure the DNS servers used by each organization's connected devices.
Admin audit log
Review a recorded history of every administrative action.
Live session bandwidth
View live bandwidth information for each connected session.
Reseller workspaces
Manage multiple customer organizations from one reseller workspace.
Built around the way your business works.
From remote employees and branch offices to customer support and managed IT, explore how Reefspan fits different network access needs.






Three live gateway regions.
Reefspan operates in New Jersey (us-east), Miami (us-southeast) and Mexico City (mx-central), with automatic gateway selection and regional failover for Reefspan Access.

us-east
us-southeast
mx-centralLet's map out your access.
Tell us about your people, office locations and network requirements. We'll discuss how Reefspan can connect them, whether you're managing one business or many customer organizations.