Why Cyferio exists

OpenVPN is excellent at exactly one job: authenticating and encrypting a connection. It was never designed to answer the questions an IT team actually gets asked — who's connected right now, from which device, is that bandwidth quota being respected, and can we prove any of it happened, six months later, in an audit.

Cyferio was built to manage a real OpenVPN deployment: per-device MAC binding so a leaked .ovpn file isn't enough to connect, geo/ASN restrictions enforced at the moment of connection rather than after the fact, and bandwidth quotas that actually get enforced instead of just tracked.

It's open source because that gap — between "OpenVPN works" and "OpenVPN is governable" — isn't specific to one deployment. Anyone running OpenVPN at any real scale hits it eventually.