Traditional VPNs struggle with how we work today
Remote work, mobile work, and multi-branch collaboration are now the norm, and the “inside the network means trusted” security boundary is failing.
Once employees log in to the VPN they can reach almost every network segment; if an account is compromised, the risk spreads quickly.
With no device binding or verification for anomalous logins, there is no way to detect someone signing in from an arbitrary device.
Only basic login logs are kept, so when an incident occurs it is hard to reconstruct who accessed what, when, and from which device.
Onboarding requires configuring each device and offboarding requires revoking access one by one; a single overlooked account is a security risk.
Identity-centric access control
Every access request must answer three questions: who you are, whether the device is trusted, and whether the access itself is normal.
Authorization by identity and device
Employee identity and device together serve as the access credential; unregistered devices cannot connect.
Least-privilege access
Internal systems and network segments are assigned by department and role, exposing only the resources required for the job.
Single-device login
An account is valid on only one device at a time, preventing account sharing or impersonation.
Two-factor verification for anomalous logins
Logins from unfamiliar locations, new devices, or unusual hours automatically trigger SMS second-factor verification.
Complete audit logs
Records the time, location, device, and traffic of every login and connection for traceability and compliance checks.
One-click permission revocation
When an employee leaves or changes roles, one click in the admin console disables the account and immediately drops any active connections.
How sTrust differs from traditional VPNs
| Item | Traditional VPN | sTrust Zero Trust |
|---|---|---|
| Deployment | Engineers configure each network device individually | Create accounts in the admin console; employees connect by scanning a QR code |
| Access scope | Most of the internal network is reachable after login | Authorized per person, exposing only specified systems and network segments |
| Account security | A leaked account can be used by anyone | Device binding + two-factor verification for anomalous logins |
| Audit capability | Only basic login records | Complete trails of time, location, device, and traffic |
| Employee offboarding | Configurations removed device by device, easy to miss | One-click disable in the console, effective immediately |
| Endpoint support | Poor compatibility with some systems | Windows, macOS, iOS, Android, Linux |
Suited to a wide range of secure access needs
Remote work
Employees can securely reach OA, ERP, file servers, and other internal systems from home.
Business travel and mobile work
Connect safely back to the office over public networks at airports, hotels, and client sites.
Multi-branch access
Business systems are opened on demand between branch offices and headquarters, and can be combined with Yuxinan SD-WAN Networking.
Third-party collaboration
Give suppliers and outsourced teams access to specified systems, then revoke it with one click when the project ends.
Bring your own device
Personal devices connect only after registration, with every access fully traceable.
Security compliance
Identity authentication and auditing capabilities support the remote access requirements of MLPS 2.0 (China’s Multi-Level Protection Scheme).
One account for all of your employees’ devices
Self-developed, delivered and operated by the same team
Subscribe by user count, try it before you decide
sTrust Subscription Details
- Subscribe based on the number of users you actually have — no servers or network equipment to purchase
- For a team of 30, the cost is about RMB 600–1,000/month
- A 30-day free trial is included, so you can validate it in your real environment first
- Customers who sign up for Siwenlide IT Operations Outsourcing receive a number of sTrust accounts at no charge
Frequently Asked Questions About sTrust
How is sTrust different from a traditional VPN?
A traditional VPN usually opens up the entire intranet once an employee logs in. sTrust authorizes by person and by device, opening only the systems needed for work, applying secondary verification to anomalous logins, and keeping audit records of every access.
Do I need to purchase servers or network equipment to deploy sTrust?
No additional purchase is required. Administrators create accounts and assign permissions in the console, and employees install the client and scan a QR code to connect. Our engineers assist with the specific connection setup based on your network conditions.
How are permissions revoked after an employee leaves?
The administrator simply disables that employee’s account in the console. Active connections are terminated immediately, and the action itself is recorded in the audit log.
Can it be used together with Yuxinan SD-WAN Networking?
Yes. Yuxinan handles networking between headquarters and branch offices, while sTrust handles secure access for employees working remotely or on the road. Both can be delivered as a single solution.
How do I request a trial?
Call 400-686-2011 or contact us through the online message form. Our engineers will help activate your 30-day trial and complete the connection configuration.
More reliable enterprise IT, more secure remote access
Get a free assessment of the security gaps in your current remote access setup, along with recommendations for improvement.
Beijing Siwen Lide Technology & Trade Co., Ltd. · sTrust Zero Trust Security