diff --git a/README.md b/README.md
index 51e8732..079aca1 100644
--- a/README.md
+++ b/README.md
@@ -149,6 +149,7 @@ the domain registration and DNS management in a simple way.
 * [Portals for Mac](https://github.com/build-trust/ockam/blob/develop/examples/app/portals/README.md) [![ockam github stars badge](https://img.shields.io/github/stars/build-trust/ockam?style=flat)](https://img.shields.io/github/stars/build-trust/ockam/stargazers) - A Mac app that uses the [Ockam](https://github.com/build-trust/ockam) library to privately share a service on your Mac to anyone, anywhere. The service is shared securely over an end-to-end encrypted Ockam Portal. Apache 2.0 License. Written in Rust.
 * [Pritunl](https://pritunl.com/) [![pritunl github stars badge](https://img.shields.io/github/stars/pritunl/pritunl?style=flat)](https://github.com/pritunl/pritunl/stargazers) - Seems quite comprehensive and complicated. OpenVPN, WireGuard, and IPSec support.
 * [OpenZiti](https://openziti.github.io) - [![OpenZiti github stars badge](https://img.shields.io/github/stars/openziti/ziti?style=flat)](https://github.com/openziti/ziti/stargazers) - Overlay network. The goal of OpenZiti is to extend zero trust all the way into your application, not just to your network. Apache 2.0 license. Written in Go.
+* [Pilot Protocol](https://pilotprotocol.network) [![pilot protocol github stars badge](https://img.shields.io/github/stars/pilot-protocol/pilotprotocol?style=flat)](https://github.com/pilot-protocol/pilotprotocol/stargazers) - Overlay network built for AI agents: every agent gets a permanent virtual address, encrypted tunnels (X25519 + AES-GCM), and STUN/hole-punching NAT traversal with relay fallback. Trust is a separate, explicit per-peer handshake decoupled from network membership. Zero external dependencies (stdlib only). AGPL-3.0 license. Written in Go.
 * [Octelium](https://github.com/octelium/octelium) [![octelium github stars badge](https://img.shields.io/github/stars/octelium/octelium?style=flat)](https://github.com/octelium/octelium/stargazers) - A FOSS self-hosted unified zero trust secure access platform that can operate as a remote access VPN, a ZTNA platform, API/AI/MCP gateway, a PaaS, an [ngrok-alternative](https://octelium.com/docs/octelium/latest/management/guide/service/http/open-source-self-hosted-ngrok-alternative) and a homelab infrastructure. AGPL-3.0 and Apache-2.0 Licenses. Written in Go.
 * [Tinc](https://github.com/gsliepen/tinc) [![tinc github stars badge](https://img.shields.io/github/stars/gsliepen/tinc?style=flat)](https://github.com/gsliepen/tinc/stargazers) - Tinc is a peer-to-peer VPN daemon that supports VPNs with an arbitrary number of nodes. Instead of configuring tunnels, you give Tinc the location and public key of a few nodes in the VPN. After making the initial connections to those nodes, tinc will learn about all other nodes on the VPN, and will make connections automatically. When direct connections are not possible, data will be forwarded by intermediate nodes. Written in C.
 * [weron](https://github.com/pojntfx/weron) - [![weron github stars badge](https://img.shields.io/github/stars/pojntfx/weron?style=flat)](https://github.com/pojntfx/weron/stargazers) - Built on WebRTC. Can create Layer 2 and Layer 3 networks. NAT traversal via STUN and TURN. AGPL-3.0 license. Written in Go.