Free forever. No paid tiers. No catch.
One plan, and it's free. The full security stack — post-quantum-ready handshake, kill switch, in-tunnel DNS, peer isolation — on every connection. No credit card, no trial countdown, no upsell.
Security and privacy for everyone
True peer isolation, in-tunnel DNS, kill switch always on. Four enforcement layers — not one toggle. We can't disclose what we don't collect.
How peer isolation works →Modern WireGuard-class tunnel, owned metal, no resold-VPS supply chain. 10 Mbps free per user — honest cap, kernel-enforced, no fair-use fine print.
In-tunnel DNS details →Hybrid post-quantum key exchange on every connection. Traffic captured today stays unreadable in the quantum era. Not a roadmap promise — shipping now.
The PQC handshake →"Harvest now, decrypt later" is real. Adversaries with quantum programmes are storing encrypted traffic to break the day a cryptographically-relevant quantum computer ships. We use the NIST-ratified replacement — already, today, on every tunnel.
A modern hybrid key exchange runs on every connection. Classical security floor, quantum-resistant ceiling — turned on, not buried in an advanced setting.
Other users on the same exit cannot reach you. Enforced at multiple layers, verified by automated end-to-end testing on every release.
Every connection uses a resolver inside the tunnel. OS-level DNS is firewall-blocked while the tunnel is up, so DNS leaks are structurally impossible.
Engages automatically the moment the tunnel covers your traffic. Drop the tunnel, drop the network — packets do not leak in the gap.
Local devices on your home network keep working while the tunnel is up. Your printer, NAS, and smart-home gear stay reachable.
No credit card. No trial countdown. The free plan is built to stay free — the whole product, at no cost, with no paid tier to upsell.