CLIENT · 5 PLATFORMSNO ACCOUNT · NO TELEMETRY
client · connected · kill-switch armed4 protocols5 platforms0 accountsv3.1
[ 00 // MULTI-PROTOCOL VPN CLIENT ]

Every protocol. Every server.
One client that obeys you.

Bring a config from any provider or your own server — WireGuard, AmneziaWG, OpenVPN or IPSec — into one app, then add what no provider app gives you: VPN pools, fine-grained on-demand rules and automatic failover. No accounts. No tracking. No ads.

4 protocols, 1 app any provider or server kill switch open source
●●● Public Wi-Fi21:04
Privycs VPNconfig · self-hosted · de-fra
AES-256
Connected
AmneziaWG · auto-failover
DPI detected on WireGuard — failed over to AmneziaWG
wg
awg
ovpn
ipsec
12.4 MB/spool · 4 nodes1.3 MB/s
[ 01 // CONFIG INGEST ]

Bring any config. Privycs parses the rest.

Scan a QR code, open a file or paste a token. Privycs reads standard config formats from any provider or your own server — nothing to register, no account to create.

parser
idle
privycs · import de-fra.wg0.confWIREGUARD
reading…
.confWireGuard · AmneziaWG
.ovpnOpenVPN profile
.sswanstrongSwan · IPSec/IKEv2
.mobileconfigApple IKEv2 payload
[ 02 // THE FEATURES ]

The power-user features no provider app gives you.

06 capabilities
on any config
[ 03 // AUTOMATION ]

It connects, switches and recovers on its own.

Define the policy once. Privycs watches every tunnel and reacts in real time — failing over when a protocol is blocked and rotating through a pool to spread load and identities.

live policy
healthy
Automatic failoverpriority chain
WireGuardde-fra · :51820standby
AmneziaWGde-fra · obfuscatedstandby
OpenVPNnl-ams · tcp/443standby
monitoring · 4 health checks / s
VPN pool · rotationround-robin · 10m
de-fra-01load 18%
nl-ams-02load 24%
se-sto-01load 11%
ch-zrh-03load 31%
next rotation in 06:12 · pre-warmed
[ 04 // ON-DEMAND ENGINE ]

Rules decide. Per network, per app, per packet.

Privycs evaluates your rule table the moment the network changes — matching SSID, BSSID or network type and connecting through exactly the tunnel or pool you assigned. Split tunneling decides which apps ride it.

current network
Public Wi-Fi
WHENTHEN CONNECT
SSID = "Home-5G"trusted · no VPN
BSSID = a4:…:9f · officeOpenVPN · corp split
Network = CellularWireGuard · pool EU
Network = Public Wi-FiAmneziaWG · pool EU kill-switch
SSID matches "*Hotel*"AmneziaWG · obfuscated
PER-APP ROUTINGsplit tunnel
Browserall web traffictunnel
Bankingregional rulesdirect
Streaminggeo-exitpool US
Emailalways protectedtunnel
P2P clientleak-guardedkill
[ 05 // PLATFORMS ]

Same app, native everywhere.

build targets
5 / 5
[ 06 // VS A PROVIDER APP ]

Keep your VPN. Lose the limitations.

/01
0
protocols in one app
/02
0
native platforms
/03
0
accounts required
/04
0
trackers · ads · telemetry
[ FROM THE BLOG ]

Deep dives from the Privycs engineering blog.

In-depth articles on protocols, routing, threat detection, clients and self-hosting.

latest writing
/blog
[ 07 // GET THE APP ]

One client. Every VPN. Your rules.

Keep your provider — or your own server. Get the protocols, pools, on-demand automation and failover that turn it into something far more capable.

no account · no card · one-time purchase, never a subscription