Skip to main content

Zen Mesh Documentation

Secure webhook delivery to private networks โ€” without opening firewalls. Free Forever. Pro Early Bird with 6-month free trial available.

Frequently Asked Questions

How does Zen Mesh deliver webhooks to private networks without opening inbound ports?

Zen Mesh uses an outbound-only Edge Plane. The zen-agent in your network establishes an outbound connection to Zen Mesh, then receives delivery over that persistent tunnel. No inbound firewall rules, no VPN, no reverse proxy.

What security controls protect webhook delivery?

mTLS, SPIFFE/SPIRE workload identity, and HMAC payload verification on every data-plane path. External provider webhooks use provider-specific signature verification at ingress. See the security documentation for the full model.

Can I use Zen Mesh with Kubernetes?

Yes. Deploy the zen-agent as a Helm chart on your cluster. The Edge Plane integrates with Kubernetes and supports zen-egress for delivering to services behind NAT or firewall.

Which webhook sources does Zen Mesh support?

Stripe, GitHub, Twilio, Shopify, and any custom HTTP webhook source. Zen Mesh validates signatures from supported providers, and provides signature verification guidance for custom sources.

Is Zen Mesh production-ready?

Individual capabilities carry per-item status (WIRED, AUTOMATED_TESTED, etc.) documented in the evidence system. Review the Current Status page for per-capability maturity. Zen Mesh does not claim production-live availability as a global platform.

What is the pricing model?

Free Forever tier available. Pro Early Bird with 6-month free trial. See zen-mesh.io/pricing for details.