Privacy defaults first. Controls when you need them.

Modern encrypted tunnels with fast handshakes and efficient roaming between Wi-Fi and mobile networks.

MODERN CRYPTOGRAPHY · FAST HANDSHAKE · MOBILE ROAMING

Fail-closed traffic controls designed to keep DNS, IPv6 and application traffic from escaping outside the VPN when protection is enabled.

KILL SWITCH · DNS PROTECTION · IPv6 PROTECTION

DNS requests stay inside the encrypted tunnel and are designed to use EVPN-controlled recursive resolvers rather than a public resolver by default.

IN-TUNNEL DNS · DNSSEC · NO QUERY LOGGING POLICY

Routing controls are designed so both address families remain inside the protected path when the tunnel is active.

DUAL STACK · ROUTE CONTROL

Automatically select an appropriate endpoint based on network quality, availability and proximity, while retaining manual control.

AUTO ROUTING · SERVER HEALTH · MANUAL CONTROL

Choose a specific planned or live location when you want explicit control over your exit.

USER CONTROL · LOCATION CHOICE

Route selected applications or destinations outside the tunnel when you intentionally need a direct path.

APP ROUTING · DESTINATION RULES

Define networks where EVPN should connect automatically — or stay idle — based on your trust preferences.

AUTO CONNECT · NETWORK RULES

Future transport options designed for networks that interfere with ordinary VPN traffic.

TRANSPORT AGILITY · RESTRICTIVE NETWORKS

Optional multi-relay routing for users who want an additional hop between device and exit.

MULTI RELAY · ROUTE COMPOSITION

Research into hybrid key-exchange and transport agility as post-quantum cryptography matures.

HYBRID KEX · FUTURE CRYPTO