No artificial gating on encryption. No "premium" countries. Stage-1 is a free tier with a hard 10 Mbps cap per peer — kernel-enforced, identical on every exit. A Pro tier ships in stage 2 once a third-party audit and EV code-signing certificate land.
| Free · stage 1 | Pro · stage 2 | |
|---|---|---|
| Price | $0/mo | TBD |
| Devices per account | 1 | multi (TBD) |
| Per-peer throughput | 10 Mbps cap | higher (TBD) |
| Exits available | 4 (FR · DE · US×2) | 4 + future |
| PQC handshake (ML-KEM-768) | ● | ● |
| WireGuard data plane | ● | ● |
| Peer isolation (4 layers) | ● | ● |
| In-tunnel DNS (unbound) | ● | ● |
| WFP-level kill switch | ● | ● |
| LAN access ON by default | ● | ● |
| Anonymous payment | — | under evaluation |
| 3rd-party audit | — (Phase γ) | required |
| EV code-signing | — (SmartScreen warns) | required |
Stage-1 takes email + Turnstile signal. No name, no address, no card. We can't disclose what we don't have. Email is for account recovery only — we will publish a privacy policy and warrant canary before stage 2 ships.
Outbound SMTP (25/465/587) blocked. Per-IP signup throttle (3/hr). 100 GB/day soft-throttle, 500 GB/day hard-disable. Connection-rate cap at 100 new TCP/sec/peer. abuse_reports table for triage. Every cap lives in code, not in a contract you don't read.