VLESS+REALITY
Borrows a real site's handshake
Presents the genuine TLS handshake of a real, uncensored website, valid certificate and all. Nothing to blocklist.
Some networks hunt VPN traffic itself. Pangea has five transports that disguise your tunnel as everyday traffic. The app tries them until one connects. Even in China.
then from £2.33/mo · cancel anytime
The app tries each transport in order until one connects. Or pin one in the Connection Method setting.
Every connection is the same WireGuard tunnel: 256-bit encryption, keys that never leave your device. The transport is just the disguise.
Borrows a real site's handshake
Presents the genuine TLS handshake of a real, uncensored website, valid certificate and all. Nothing to blocklist.
Hides in ordinary HTTPS
Wraps your tunnel in TLS that looks like normal traffic to a major website. Probes see an ordinary web server, not a VPN.
No TLS to inspect
Encrypted traffic on its own port with no TLS handshake at all. Filtering built to read TLS has nothing there to read.
Built for throttled networks
QUIC-based, looks like HTTP/3, stays fast on slow or throttled connections. When TCP is squeezed, it punches through over UDP.
Indistinguishable from Chrome
Runs your traffic through Chromium's own network stack, so the TLS fingerprint is Chrome's. Blocking it means blocking Chrome.
No transport stays unblockable forever. That's why there are five, with more in testing.
An always-on kill switch cuts your internet the instant the VPN connection falls — while reconnecting, while switching transports, whatever happens. Your real IP and traffic never leak out.
All five ship in the open-source app today.
then from £2.33/mo · cancel anytime
The desktop app is open source under the GNU GPLv3.