Home Services Products Blog About Contact

Tools built the way
we build systems.

Same philosophy — no shortcuts, no compromises.

Beta · pro free

Korax

PGP-first email. Private by default.

An email client where encryption is the default, not a plugin. Signing, encryption and key management are part of your everyday inbox — across desktop and mobile.

  • Native PGPEncryption and signing built in — not a plugin, not an extension.
  • No tracking pixelsRemote images blocked by default. Senders can't see when you open a message.
  • Local-firstAll messages cached in SQLite on your device. Instant load, fully offline.
  • Secure enclavePrivate keys stored in iOS Keychain, macOS Keychain, or Android Keystore — never written to disk in plaintext.
Platform availability
Linux Available now
macOS Coming soon
Android Coming soon
iOS Coming soon
Beta

Konduit

A TCP-native VPN for the environments WireGuard gives up on.

Airport Wi-Fi, hostile corporate firewalls, long-haul satellite links. Konduit tunnels over any TCP port — including 443 — where UDP is dead, with operator-grade routing controls underneath.

  • TCP-nativeSurvives restrictive firewalls and ISP interference on any TCP port you configure.
  • Central policyEnforce corporate routing and ACLs from the server, not the client.
  • Modern cryptoX25519 key exchange + ChaCha20-Poly1305 AEAD.
  • Cross-platformRust core, Flutter UI. Linux, macOS, iOS, Android.
konduit connect --config client.toml
→ Authenticating device… OK
→ Handshake (X25519)… OK
→ Tunnel established (TCP/443)
Connected to Helsinki-1
Beta

Koridor

VPN over your own SSH server.

Instead of operating its own VPN infrastructure, Koridor routes your device's traffic through a plain SSH server you already trust. No Koridor-operated backend, no account, no third party in the middle.

  • Full-device tunnelTUN-based VPN covers every app on the device — not just a SOCKS proxy.
  • Bring your own serverConnects to any SSH server with AllowTcpForwarding enabled. No special server-side software.
  • Simple onboardingSet up a connection profile, toggle on, done.
  • Fail-closed reconnectsTransient drops retry with backoff; if the tunnel can't recover, the route is torn down rather than leaking traffic.
Platform availability
Linux Available now
Windows Available now
Android Available now
macOS · iOS Coming soon