About
Why build another VPN.
Every VPN asks you to trust it. Most then ask you to trust a policy: we do not log. A policy is a sentence. The next owner, the next subpoena, the next engineer under pressure can change a sentence.
We wanted to build one where the interesting promises are not sentences. Where the machine that carries your traffic is never told who you are — not because it agrees not to look, but because the thing it is shown has no name in it. Where the machine that knows your name cannot see a packet. Where the counters a gateway keeps have no column for a destination, so a request for one is answered with a schema, not a refusal.
That is the product. The rest — the app, the plans, this site — exists to put that in front of people plainly. If you find a place where the product disagrees with the words on this site, the product is right and we would like to know.
The name
The Nemean lion had a hide that no weapon could get through. It is the first of the twelve labours, and the one Heracles had to solve without his tools. We liked it for the obvious reason — a tunnel nothing gets through — and for the less obvious one: the hide is what the lion was born with, not something it put on.
How we write
Plainly. Nothing on this site is “military-grade”, “the world’s fastest”, or “number one”. Where a thing is partly built, the page says which part. Where a thing is not built, it is listed as not built rather than left off, because the absence of a feature from a feature list is how people end up relying on something that is not there.
Colour means state: green is protected, amber is attention, red is broken. The buttons are black because a page that shouts in blue everywhere has no colour left for the moment it needs to say your connection is not protected.
Where we are
The candid list, kept in one place. It gets shorter with each release.
The product
- Windows is the most tested desktop build. The tunnel has carried real traffic through deployed gateways.
- macOS installs and signs in; connecting needs a privileged helper that is not wired up yet.
- Linux runs; it is labelled beta because it is tested less.
- iOS and Android apps are planned and not started.
- DNS is not resolved inside the tunnel yet. IPv6 is blocked rather than carried. There is no general kill switch.
- Split tunnelling is by destination, not per application.
- Signing in does not yet survive a restart of the background service; you will be asked to sign in again.
Trust
- No independent audit yet.
- Installers are not code-signed. Checksums are published with each release.
- There is no auto-update channel. New versions are a manual download.
- The protocol is version 1 and marked draft; it has no traffic-analysis resistance and no post-quantum key exchange.
Operations
- Five locations, on rented cloud instances. The network page lists them with the provider beside each.
- Cryptocurrency payment is planned and not built.
Contact
Support: [email protected]. A person reads it.
Security: [email protected]. See the security page for what to include.
Status: status.nemean.io.
Company: Nemean Software, LLC.