February 2026 Summaries

The Winter Update was a significant collaborative effort involving various team members across different roles, each contributing uniquely to its successful launch. Key figures included Tiana He, who managed performance marketing, and Chelsea Kelly, who ensured cohesive branding design. Alex Kretzschmar created engaging video content, while Ellie Mees prepared internal teams for the launch. Will Moore handled external communications, and Jillian Murphy and Smriti Sharma coordinated product marketing. Kate Packard managed lifecycle marketing, ensuring the update reached the right audience, and Kevin Purdy crafted educational content. Natasha Sawires fostered community engagement, Jasmine Shaw synchronized the launch logistics, and the documentation team made sure all materials were accurate and user-friendly. The update exemplifies the power of cross-functional teamwork, with each member playing a critical role in turning product releases into impactful stories.

LM Link is a new offering from a partnership with LM Studio, designed to facilitate the secure sharing and running of open-weight large language models (LLMs) across devices without exposing them to the public Internet. Utilizing Tailscale's private networks, LM Link enables users to access remote models seamlessly, as if they were local, through encrypted connections. This setup benefits various users, including home tinkerers, teams, and regulated industries, by allowing them to harness powerful LLMs securely and efficiently across multiple endpoints. LM Link is based on tsnet, providing centralized device control and encrypted peer-to-peer communication while ensuring data privacy by keeping device interactions and configurations invisible to backend services. LM Studio, available for personal and enterprise use, offers an intuitive interface for managing these connections, making it easier for users to deploy and test large models across different environments.

Modern infrastructure access demands a shift toward identity-based solutions that accommodate the cloud-native and ephemeral nature of contemporary workloads. Traditional Privileged Access Management (PAM) models are costly and complex, often misaligned with current team dynamics. Tailscale addresses this by enhancing identity-aware auditing and visibility across Kubernetes, network traffic, and SSH access, all while using a lightweight connectivity model. The Winter Update introduces new capabilities such as Kubernetes API proxy audit logging, enriched network flow logs with actor context, and integrated SSH login logs on Linux, which collectively improve access governance without necessitating additional infrastructure. These advancements ensure more precise audit visibility, simplify network log interpretation, and marry system logs with identity information, maintaining low operational overhead. By treating secure connectivity, access control, and audit observability as a unified system, Tailscale aims to reduce operational complexity while meeting strict governance requirements, offering a cohesive platform that aligns with modern infrastructure needs.

Tailscale Services has transitioned from its beta phase to general availability, introducing a service-aware networking model that simplifies connectivity by allowing resources to be published as named services with stable identities and granular access controls. This model eliminates the need for traditional service mesh overhead, enabling smoother migrations, scaling, and high availability without complex reconfigurations. The service now includes native integration with tsnet, Tailscale's Go library, allowing applications to register directly with Tailscale Services, making them application-aware and improving real-time traffic steering and availability decisions. The platform also extends connectivity to Kubernetes workloads, offering a consistent model across environments, and supports declarative configuration for GitOps-style workflows. Enhanced observability features, such as per-service audit logs and network flow logs, provide better visibility and auditing capabilities, while access control tests increase security by allowing validation of policies before production deployment. Tailscale Services is available on all plans, with users allowed to create up to 10 services, and the company offers gratitude to beta testers by excluding their usage from the limit for a year.

Workload identity federation is now generally available on the Tailscale platform, enhancing authentication for infrastructure workloads by eliminating the need for long-lived, hard-coded secrets. This feature allows CI/CD pipelines and cloud workloads to authenticate using federated OpenID Connect identities, streamlining secure automation at scale. The Tailscale API and Terraform provider support creating and managing federated identities, enabling trust configurations to be defined and managed entirely through code, which can be stored in version control for auditability and reproducibility. Additionally, automatic cloud token discovery and exchange are facilitated through a new command flag, and tsnet and the Tailscale Kubernetes operator now support workload identity federation, allowing applications and clusters to join tailnets without static credentials. This update simplifies the connection of CI systems, cloud services, and Kubernetes clusters to Tailscale, improving security and ease of management across various cloud environments.

Tailscale Peer Relays, now generally available, offer a robust solution for maintaining secure and reliable network connections in challenging environments where direct peer-to-peer links are hindered by factors such as firewalls and NATs. These relays, deployable on any Tailscale node, have evolved from a workaround for network constraints to a production-ready option that enhances performance, control, and flexibility, particularly in cloud environments with strict endpoint restrictions. By integrating with static endpoints and offering improved throughput through vertical scaling, Peer Relays ensure high-performance connectivity even when automatic endpoint discovery is not feasible. Additionally, they enhance observability and auditability by integrating with Tailscale's monitoring tools, providing detailed metrics for tracking relay usage and detecting anomalies. Available on all Tailscale plans, Peer Relays maintain core Tailscale guarantees like end-to-end encryption and predictable operation while enabling scalable, resilient networking solutions.

Tailscale has announced the general availability of its device posture integration with Fleet in its Enterprise plan, allowing organizations to bridge the gap between authentication and device management by incorporating Fleet-managed device state directly into Tailscale access policies. This integration enables companies to enforce network access policies based on whether devices are actively enrolled and managed, which is particularly beneficial for remote teams, developers with self-managed machines, and organizations with compliance requirements for managed devices. By applying device management state to access enforcement, it helps reduce exposure and access drift with minimal overhead. Administrators can define what "managed" means for their organization, and Fleet periodically syncs device management state into Tailscale, which uses these attributes in access policies to automatically restrict access if a device no longer meets the defined requirements. The integration is straightforward to set up for existing Fleet and Tailscale users, with full documentation available in Tailscale's docs.

Tailscale has expanded its log streaming capabilities to include Google Cloud Storage (GCS), allowing organizations that primarily use Google Cloud to store Tailscale logs alongside their other operational and security data. This integration provides a seamless way to manage and retain logs using existing Google Cloud controls, such as IAM policies and retention rules, and facilitates the archiving of logs for compliance or routing data to systems like BigQuery or Chronicle. The log streaming feature supports both network flow logs, which capture connection metadata, and configuration audit logs, which record administrative actions, without compromising network performance or encryption. Available on Tailscale's Personal, Personal Plus, and Enterprise Plans, the feature ensures that network visibility is maintained without reintroducing performance bottlenecks, as every connection is authenticated and tied to specific user or device identities.

The integration of Huntress device posture attributes into Tailscale's access policies is now generally available, allowing for a more dynamic and responsive approach to endpoint security. This integration addresses the challenge of separate operations between endpoint security solutions like Huntress, which report on device protection status, and access control systems like Tailscale, which manage resource access. By enabling Tailscale to automatically adjust access policies based on Huntress-reported device security attributes such as antivirus status and firewall compliance, the integration aims to minimize the security gap that occurs when device health changes faster than access policies can be updated manually. This enhancement allows teams to enforce consistent baseline protections without manual verification, thereby reducing the risk of unauthorized access or lateral movement. The integration is available for Enterprise customers, who can enable it by connecting their Huntress account through the Tailscale admin console and configuring appropriate permissions, with detailed setup instructions provided in the documentation.

Aperture is a new gateway tool built on Tailscale's network that simplifies AI connectivity, security, and identity management by aggregating API keys and logging calls with attached identities, enhancing security and ease of use. It offers centralized access to model providers like AWS Bedrock and Google Vertex and integrates with partners such as Cribl, Oso, Apollo Research, and Cerbos to provide real-time analysis, dynamic access policy management, and enhanced visibility into AI usage. Aperture aims to eliminate API key management challenges, facilitate the rapid implementation of AI tools, and offer granular control over AI workflows, making it easier and more secure for teams to adopt AI without compromising on speed or safety. The product is being developed with customer feedback, and it already supports major LLM providers, self-hosted LLMs, and most major cloud AI endpoints, with plans for further expansion and integration.

Tailscale's Winter Update Week introduces a series of enhancements designed to improve secure connectivity by making it easier, more secure, and capable across various real-world scenarios. The updates focus on optimizing how teams connect CI/CD systems, manage access and privileged workflows, secure modern AI systems, and integrate secure connectivity into products. These improvements aim to simplify operations, reduce unique configurations, and enhance reliability, making secure connectivity a seamless, foundational aspect rather than a complication. Throughout the week, Tailscale will showcase these updates via their YouTube channel and social media, culminating in a webinar for an in-depth exploration of the new features.

As Tailscale grows, the company faces the dual challenge of expanding its use cases and responsibilities while maintaining simplicity and predictability in its secure networking solutions. The core of Tailscale's product is its ease of use, allowing seamless communication between machines with minimal user intervention. The company recognizes the risk of complexity as they add more enterprise features, and to manage this, they have welcomed Ross Kukulinski as VP of product. Kukulinski's experience in infrastructure and development experience products positions him to help Tailscale control complexity while enhancing its capabilities. His approach involves making careful, deliberate choices to keep the product understandable and efficient, ensuring that Tailscale retains its "magic" by integrating engineering discipline and product restraint. This strategic move aims to continue delivering intuitive and secure networking solutions as the company navigates increasing demands.