Features & How It Works

Military-grade encryption

AES-256-GCM and ChaCha20-Poly1305 with 4096-bit key exchange and perfect forward secrecy. The same ciphers used to protect classified government traffic.

Audited no-logs policy

No connection timestamps, no assigned addresses, no session duration, no browsing history. Our servers run from volatile memory, so there is nothing on a disk to seize.

Multi-device support

Windows, macOS, Linux, iOS, Android, Android TV, routers and browsers, all covered by one set of credentials with no per-platform charge.

Speed without the tax

A WireGuard-based tunnel on 10 Gbps ports. Most members see 88 to 94 percent of their unprotected line speed on a nearby location.

Kill switch

If the tunnel drops for any reason, every packet is held at the network interface until the connection is rebuilt. Nothing leaks during the gap.

Split tunnelling

Send your banking app straight out of the local connection while everything else stays inside the tunnel. Configured per app, per site or per subnet.

DNS and IPv6 leak control

Every query resolves on our own encrypted resolvers. IPv6 is either tunnelled or blocked outright, never handed back to your provider.

Public Wi-Fi protection

Auto-connect rules recognise untrusted networks and raise the tunnel before a single request leaves the device.

68 countries

3,400+ servers across 68 countries, with obfuscated entry points in regions where plain VPN traffic is filtered.

Protocol choice

WireGuard for speed, OpenVPN for compatibility, IKEv2 for mobile handover, and a stealth mode that presents as ordinary HTTPS.

Anonymous accounts

We ask for an email address and nothing else. No name, no address, no phone, no identity document at any stage.

Support by a human

Every message is read by a coordinator who can see your configuration. No ticket queue, no scripted first reply, no chatbot.

How It Works

Access Is Issued By Hand, Not By Signup Form

There is no dashboard to create and no card to enter. You send a request, a coordinator reviews it, and you receive a reply containing your account credentials and the download link for your platform. Nothing about your account is exposed on a public page, and no credentials are ever published on this site.

Send a request

Use the form on this site. Tell us how many devices you need to cover, which regions matter and what you are protecting. It takes under a minute and asks for no payment details.

A coordinator reviews it

A person reads your request, matches it to the right plan and prepares an account. Business requests get a short written deployment note at this stage.

Credentials arrive by email

You receive one reply containing your username, your access key, the download link for each platform you asked for, and your confirmed price in writing.

Connect and test

Install, sign in with the credentials you were sent, and use the whole network free for 14 days. Nothing is charged until you say the word.

Protocols

Four Tunnels, One Set Of Credentials

You are issued one account and can switch protocol in the app at any time. WireGuard is handed out by default because it reconnects fastest on a changing network.

WireGuard

Default · 96% speed

A modern 4,000-line codebase that connects almost instantly and survives network changes without dropping. What we hand out unless you ask otherwise.

OpenVPN UDP

Compatible · 78% speed

Two decades of audits behind it and support on hardware that predates WireGuard entirely. The right pick for older routers and NAS boxes.

IKEv2/IPsec

Mobile · 84% speed

Holds a session across a handover from Wi-Fi to mobile data without a reconnect. Our recommendation for phones that move all day.

Stealth

Restricted · 62% speed

Wraps the tunnel so it presents as ordinary TLS traffic on port 443. For networks where a plain VPN handshake is filtered at the border.

Nothing to configure by hand. The applications ship with our profiles already loaded. If you prefer to configure a router or a firewall yourself, ask your coordinator and we will send the config files.

Why Trust This

Claims We Can Actually Back Up

Independently audited

Our no-logs claim and server configuration are reviewed annually by an external assessor, and the summary is sent to any member who asks for it.

Diskless infrastructure

Every node boots from a signed read-only image into volatile memory. There is no writable disk in the fleet to compel, image or seize.

Owned, not rented

We operate our own bare metal in 68 countries rather than reselling shared cloud capacity, so nobody else holds the hypervisor above your traffic.

Rotated keys

Session keys rotate every two minutes and server keys every deployment cycle, so a single compromised key opens a two-minute window and nothing more.