Hidden in plain HTTPS.
A censor watching the wire sees ordinary web traffic on port 443. No tell-tale handshake, no blockable fingerprint. If they probe the server, it answers like a normal website.
A Double Ratchet rekeys every message, so a stolen key never unlocks the past or the future.
Probe the endpoint and it serves a real decoy site. Nothing to confirm, nothing to block.
The core is written in Rust — whole classes of vulnerabilities simply can't occur.
Don't take our word for it.
Every claim on this page maps to code you can read. Clone the repo, check out a tag, and build the exact binary we ship. Reproducible by design.
Read the whitepaper →Open source first.
Always.
rVPN is and will remain free and open under AGPLv3. The optional hosted service simply funds the work — it never closes the door on the code.
Everywhere you are.
One protocol, every device. Native apps for phone and desktop, a command-line client for your servers — and the open source to port it anywhere we haven't yet.
