Our Products
Tools built the way
we build systems.
Same philosophy — no shortcuts, no compromises.
Beta · pro free
Korax
PGP-first email. Private by default.
An email client where encryption is the default, not a plugin. Signing, encryption and key management are part of your everyday inbox — across desktop and mobile.
- Native PGPEncryption and signing built in — not a plugin, not an extension.
- No tracking pixelsRemote images blocked by default. Senders can't see when you open a message.
- Local-firstAll messages cached in SQLite on your device. Instant load, fully offline.
- Secure enclavePrivate keys stored in iOS Keychain, macOS Keychain, or Android Keystore — never written to disk in plaintext.
Platform availability
Linux
Available now
macOS
Coming soon
Android
Coming soon
iOS
Coming soon
Beta
Konduit
A TCP-native VPN for the environments WireGuard gives up on.
Airport Wi-Fi, hostile corporate firewalls, long-haul satellite links. Konduit tunnels over any TCP port — including 443 — where UDP is dead, with operator-grade routing controls underneath.
- TCP-nativeSurvives restrictive firewalls and ISP interference on any TCP port you configure.
- Central policyEnforce corporate routing and ACLs from the server, not the client.
- Modern cryptoX25519 key exchange + ChaCha20-Poly1305 AEAD.
- Cross-platformRust core, Flutter UI. Linux, macOS, iOS, Android.
konduit connect --config client.toml
→ Authenticating device… OK
→ Handshake (X25519)… OK
→ Tunnel established (TCP/443)
Connected to Helsinki-1
Beta
Koridor
VPN over your own SSH server.
Instead of operating its own VPN infrastructure, Koridor routes your device's traffic through a plain SSH server you already trust. No Koridor-operated backend, no account, no third party in the middle.
- Full-device tunnelTUN-based VPN covers every app on the device — not just a SOCKS proxy.
- Bring your own serverConnects to any SSH server with AllowTcpForwarding enabled. No special server-side software.
- Simple onboardingSet up a connection profile, toggle on, done.
- Fail-closed reconnectsTransient drops retry with backoff; if the tunnel can't recover, the route is torn down rather than leaking traffic.
Platform availability
Linux
Available now
Windows
Available now
Android
Available now
macOS · iOS
Coming soon