15,000+ servers · 120+ countries
Dense coverage with smart routing — if a node degrades, we steer around it before you notice.
Zero-trust access, made simple to deploy and effortless to use — whatever the threat model.
Dense coverage with smart routing — if a node degrades, we steer around it before you notice.
Backbone everywhere, not just marketing cities. Independently benchmarked quarterly.
Our WireGuard transport layer shaves ~20–35% off latency over vanilla WG on congested networks.
Activity, DNS, and IP logs are never written. Audit reports are linked from every release.
Sign up with email only. Pay with card, crypto, or cash voucher — no phone number required.
Every app across every platform is OSS. Verify the crypto, compile the binary yourself.
AES-256 / ChaCha20 with Perfect Forward Secrecy. Quantum-resistant tunnels opt-in on Plus.
Blocks all traffic if the tunnel drops — even for a millisecond. No DNS or IPv6 leaks.
Route only the apps you choose — or the opposite: everything except X.
Multi-hop through hardened datacenters in Switzerland, Iceland, and Sweden.
DNS-level filtering of trackers, malware, and intrusive ads — system-wide, across every app.
Traffic looks like HTTPS on restrictive networks. Works where vanilla WireGuard is blocked.
Opt-in per device — essential for P2P, self-hosted game servers, and remote access.
Upgrade to Plus the day you need more devices or Secure Core.