The VPN built for the hostile internet.
Enterprise-grade VPN with AES-256, WireGuard, REALITY transport, and ML-KEM post-quantum key exchange. Hand-picked global nodes. VLESS + XTLS-Vision for near-line-rate throughput on any network.
What ships in the box.
No marketing fluff. These are the features wired into the production agents you connect to today.
Real servers, in places that matter.
Every dot on the map is a location with at least one server online and accepting traffic right now. Hover any marker to see how many active nodes back it — the count comes straight from the agent telemetry our admin dashboard reads.
Same protocol the censorship circumvention community trusts.
Generic VPN protocols — WireGuard, OpenVPN, IKEv2 — have identifiable handshake fingerprints. State-level DPI learns those signatures and drops them. We offer WireGuard for clean networks where speed wins, and switch to a stealth stack when DPI is in the way.
On hostile networks the data path runs VLESS + XTLS-Vision over a REALITY transport that mirrors a real TLS handshake to a third-party server. To an observer there is no VPN — just a user visiting a perfectly ordinary HTTPS site.
Encrypted against computers that don't exist yet.
Quantum computers capable of breaking RSA and elliptic-curve cryptography are expected within the decade. Every session on SecureFox is protected now.
Harvest-now, decrypt-later
Nation-state adversaries record encrypted VPN traffic today, storing it until a quantum computer can break the session keys. With classical VPNs, everything you've ever sent is potentially decryptable in the future.
SecureFox uses ML-KEM-768 + X25519 hybrid key exchange — standardised by NIST in August 2024. Session keys cannot be derived even with a future quantum computer.
NIST finalises ML-KEM-768 (FIPS 203)
SecureFox ships PQC hybrid KEM in production engine
"Q-Day" — quantum decryption of classical ciphers becomes viable
Module Lattice-based. Quantum-resistant key exchange replacing classical Diffie-Hellman.
Combined with ML-KEM-768 so the session is safe even if either algorithm is broken.
Authenticated encryption. Quantum-safe at 256-bit key length against Grover's attack.
Context-bound KDF. Faster than HKDF with equivalent security guarantees.
One subscription. Every device you own.
Billing is handled by the App Store and Google Play — we never see your card. Cancel from your device subscription settings at any time.
Free Trial
- 1 · devices
- Unmetered · bandwidth
- 10 Mbps cap · speed
- Tier 1 · server tier
- Always free · cancel
Basic
- 3 · devices
- Unmetered · bandwidth
- Line-rate · speed
- Tier 1 · server tier
- Cancel anytime · cancel
Premium
- 5 · devices
- Unmetered · bandwidth
- Line-rate · speed
- Tier 2 · server tier
- Cancel anytime · cancel
Premium Yearly
- 5 · devices
- Unmetered · bandwidth
- Line-rate · speed
- Tier 2 · server tier
- Cancel anytime · cancel
Answers, in plain English.
We ship WireGuard for clean networks and VLESS + XTLS-Vision over REALITY transport for hostile ones — a stack designed for environments where ordinary VPN protocols (OpenVPN, IKEv2) get fingerprinted and blocked. Clean networks get near-line-rate speeds; on a censored network the tunnel survives.
No session logs and no DNS logs. The node agent reports aggregate metrics — CPU, bandwidth, connection counts — that aren't attributable to any user session. We're working toward an independent audit and a public warrant canary in 2026.
iOS 14+, Android 8+, and macOS 13+ today. Windows and Linux are on the 2026 roadmap.
All subscriptions go through Apple App Store or Google Play in-app purchases — managed by your device subscription settings. We never see your card. Web checkout via Stripe/Coingate is reserved for crypto and gift codes.
The REALITY transport is specifically built for these environments. We can't guarantee 100% uptime against a state-level adversary, but you should expect significantly better resilience than commodity protocols.
Anti-block splits the TLS handshake into smaller chunks to slip past deep packet inspection — that adds 200–500 ms to the connect step, depending on your latency to the server. Once the tunnel is up, throughput is identical to a normal connection; the trade-off only shows up the moment you press Connect.
Turn it on if you're on a network that fingerprints or throttles VPN traffic — strict mobile carriers (Telkomsel, IndiHome on certain plans), or any time you're inside China or Russia. On clean networks (home Wi‑Fi, most office Wi‑Fi) leave it off so connect time stays fast. If you don't know, leave the auto-detect on — the app turns it on only when it sees DPI on the path.
Yes — capped at 5 GB / month and 10 Mbps on Tier-1 servers. It's enough for browsing, light streaming, and trying the product before committing.
Refunds are handled by the store you bought through (App Store / Google Play). Both stores allow refund requests within a regional grace window — typically 14 days in the EU and 48 hours in the US.
Fast, private, everywhere.
Install the app, open it, tap connect. Free tier gets you 5 GB and Tier-1 servers — upgrade when you're ready.