Barrett Lyon, the DDoS defense pioneer and founder of Prolexic, has launched doxx.net and raised $38 million in a Series A round led by a16z.
The product can be viewed, at least initially, as a Tailscale-style service built for AI agents. doxx.net is designed to place computers, servers and agents inside the same private network, then control which parties can connect to one another and what each one can access.
The source compares that setup with a familiar Tailscale use case: securely linking a MacBook and a Mac mini while limiting which devices and ports can talk to each other. With doxx.net, that control extends to the agent running on the Mac mini itself.
In practical terms, a user could allow that agent to connect only to a specific server and access only a specific service, while withholding permission for other machines entirely.
The main difference from Tailscale, as described in the report, is that an agent is not only connected to the network. It can also change the network configuration on its own. doxx.net says an agent can onboard devices, modify firewall settings, create internal domain names and even complete network setup by itself. The company also allows users to hand configuration access directly to the agent so it can carry out those tasks on its own.
This design is aimed at long-running agents. The idea is that agents will stay resident on computers and servers, deploy services by themselves, call APIs and hold broader permissions over time. doxx.net is trying to separate and manage those permissions so that each agent can reach only the machines and services it is meant to use, with access removed when no longer needed.
doxx.net also operates its own IP address resources, DNS, certificate systems and network infrastructure, while providing encrypted communication between devices. The product is currently open for testing.

