Most VPNs just hide you. VeloGuardian protects you.

Encrypt everything you do online and block ads, malware and phishing on the plans that include it, in one app, on every device. Set up in under a minute.

  1. Encrypts everything you do onlineEvery plan, every device. Set up in under a minute.
  2. Blocks ads, malware and phishingOn the plans that include it.
Start 7 days free → See plans
VeloGuardian VPN app connected, encrypting traffic and blocking threats

What it is

What is VeloGuardian?

VeloGuardian is a network security platform that combines a WireGuard VPN with Cloud Shield filtering on our servers, a free self-hosted DNS filtering appliance, and NetGuard, a WireGuard gateway for home and office networks.

The VPN encrypts every connection with WireGuard and runs on Windows, macOS, iOS and Android. On Shield and above, Cloud Shield blocks ads; on Fortress and Citadel it also blocks known malware and phishing domains, before they reach your device.

Plans start at $3 per user per month and cover up to 10 devices, with a custom business plan for teams. 7 days free for new subscribers.

Threat landscape

Every connection is a surface.

Plain-text lookups, malware that hides in DNS, and networks without a full firewall. Each one is a gap.

88%
Of DNS lookups
Sent to Cloudflare's 1.1.1.1 resolver travel unencrypted
Cloudflare Radar, 2025 86.6% over UDP and 2.0% over TCP, both plain text, February 2025
91%
Of malware
Uses DNS for control, data theft or redirection
Cisco Annual Security Report, 2016 Malware samples Cisco validated as known bad
26%
Of UK businesses
Have no firewall covering their whole network
UK Cyber Security Breaches Survey, 2026 74% have one (2,112 businesses surveyed)

The VeloGuardian VPN encrypts your DNS lookups. Cloud Shield and the DNS appliance block known malicious domains.

The solution

Three products. Complete protection.

Each built for a specific threat. Use one or all three.

Powered by WireGuard

VeloGuardian VPN

WireGuard encryption with Cloud Shield filtering on our servers, on Windows, macOS, iOS and Android.

  • Windows, macOS, iOS and Android
  • Servers in six cities
  • Ads blocked from Shield up, malware and phishing from Fortress
Explore the VPN

Powered by WireGuard

WireGuard encryption with Cloud Shield filtering on our servers, on Windows, macOS, iOS and Android.

  • Windows, macOS, iOS and Android
  • Servers in six cities
  • Ads blocked from Shield up, malware and phishing from Fortress
Explore the VPN

Better together

Layered protection, one platform.

Each product works on its own. Together they cover your devices, your network and the way back in.

ENCRYPTED REMOTE ACCESS ALL TRAFFIC DNS ONLY Client VPN App VPN Server Cloud VPN NetGuard WG Gateway Your LAN Local Network DNS Filter Off-path Internet ✓ Protected ✕malware ✕phishing ✕ads

  • Encrypt

    WireGuard encrypts all traffic between your devices and the internet.

  • Filter

    Cloud Shield on the VPN and the DNS appliance on your network block ads, malicious domains and phishing before they load.

  • Reach

    NetGuard connects you to your home or office network from anywhere, over WireGuard.

FAQ

Frequently asked questions.

VeloGuardian is a network security platform: a WireGuard VPN with Cloud Shield filtering on our servers, a free self-hosted DNS filtering appliance, and NetGuard, a WireGuard gateway for home and office networks. The VPN runs on Windows, macOS, iOS and Android, for individuals and small businesses that want layered protection from one vendor.

A regular VPN only encrypts your traffic. VeloGuardian also filters it on our servers with Cloud Shield: Shield blocks ads, and Fortress and Citadel also block known malware and phishing domains, before they reach your device. Citadel, our business plan, adds the NetGuard remote-access gateway and DNS query reports.

Yes. VeloGuardian DNS is a self-hosted virtual appliance with no paid tier and no account required. It runs on VMware, VirtualBox and Proxmox, offers 75 categories in 13 groups (domain lists for 7 so far), and provides per-client profiles, blocklists and a dashboard. It sends a small daily check-in (an appliance ID, its version and hostname) that you can switch off in Settings from version 0.6.3, and there is no upsell inside the product.

Native VPN apps for Windows 10 and later, macOS 12 and later, iOS and iPadOS 15 and later, and Android 7.0 and later. Sentry, Shield and Fortress each cover up to 10 devices per account. The DNS appliance filters every device that uses your network's DNS, with nothing to install on them.

Plans start at $3 per user per month. Sentry is the WireGuard VPN, Shield adds ad blocking, Fortress adds malware and phishing blocking, and Citadel is a custom business plan with the NetGuard remote-access gateway and DNS query reports. Annual billing saves up to 37%. The DNS filtering appliance is free.

VeloGuardian runs VPN servers in Amsterdam, Milan, Warsaw, Mumbai, Beauharnois (Canada) and Dallas: Europe, North America and India. Each runs WireGuard on hardened Linux. You choose a server in the app, which shows each server's live latency.

On Sentry, Shield and Fortress we keep no activity logs: no connection logs, no traffic logs and no DNS query logs. Citadel, the business plan, keeps DNS query logs only when the business asks for them, for 30 days, so it can see its reports. Account and billing data is kept only as needed to run your subscription. The free DNS appliance keeps its query data on your own network; it only sends the small daily check-in described above.

Protected in under a minute.

Install the app, sign in and connect. 7 days free for new subscribers.

Start 7 days free → See plans