Built for the users the internet is being renovated against: EU citizens under age gates, users behind the Great Firewall, Iranians and Russians whose network is a hostile environment. Not built for corporate remote workers.
Real servers. Real jurisdictions. No fake counts.
Eight protocols on board. The app picks. You can override.
Fast, modern, boring in the good way.
Small kernel-level codebase, state-of-the-art crypto. Default whenever the network lets us out clean.
TLS on 443. Looks like HTTPS.
The workhorse. Kicks in when UDP is throttled or WireGuard is blocked outright.
The framework the great firewall is scared of.
Not a protocol, a platform. Everything below rides on it: transport swapping, TLS masking, multiplexing.
Encrypted, header-scrambled. Old faithful.
Random headers, timestamp auth, no plaintext fingerprint. What kept people online through the last decade of blocks.
Leaner than VMess. Harder to fingerprint.
No built-in crypto overhead. Pairs with XTLS/Reality to look identical to a real TLS site the censor doesn't want to break.
Pretends to be a normal HTTPS website.
If probed, it serves a real website. Deep packet inspection shrugs and moves on. That's the whole trick.
The classic that got a billion people out.
SOCKS5 with a cipher on top. Still works, still fast, still the fallback of fallbacks in a pinch.
Ours. Trained on the traffic they actually block.
Built from watching the censors up close. Ships when nothing else survives the wire. Auto-selected in China, Iran, Russia.
$5 a month. Cancel in one click. No email, no card, no story to tell.