How can we help?

VeloGuardian is a network security platform with three products: a WireGuard VPN for encrypted connections, a DNS filtering appliance for blocking threats at the network level, and a NetGuard gateway for secure remote access to your LAN.

VPN plans start at $3/month. The DNS filtering appliance is completely free, with no account required. NetGuard is included with CITADEL-tier VPN subscriptions. See our pricing page for details.

No. VeloGuardian DNS runs fully independently on your network with no account and no cloud dependency. It sends a daily check-in to VeloGuardian, which you can switch off in Settings from version 0.6.3.

The VPN app is available on Android, iOS, macOS, and Windows. DNS and NetGuard are deployed as virtual machine appliances on VMware ESXi, VMware Workstation, VirtualBox or Proxmox.

You can cancel anytime from your account settings in the app. Your access continues until the end of your billing period.

Download the app for your platform, create an account, and tap Connect. The app automatically configures your WireGuard tunnel, with no manual setup needed.

WireGuard is a modern, lightweight protocol that's faster and more secure than OpenVPN or IPSec. It uses state-of-the-art cryptography and has a minimal attack surface.

Cloud Shield is VeloGuardian's built-in web filtering that protects you while connected to the VPN. It blocks ads on Shield, and ads, malware and phishing on Fortress and Citadel, at the DNS level before they reach your device. Sentry does not include filtering.

Yes. Sentry, Shield and Fortress cover up to 10 devices. Install the app on each device and sign in with the same account.

Try switching to a different server location, check your internet connection, or restart the app. If the issue persists, contact us at contact@veloguardian.com.

Download the OVA appliance from the downloads page, import it into your hypervisor, and follow the console setup wizard to configure your network. Point your router's DNS to the appliance IP.

75 categories in 13 groups such as Security, Adult Content, Bandwidth and Business, with domain lists for 7 of them today. You can enable or disable categories per client profile.

Yes. Create client profiles and assign them to devices by IP address, MAC address, hostname, or subnet. Each profile can have its own category settings and time-based schedules.

Updates are signed packages. You apply them with a click from the System Status page in the dashboard, or upload a package manually.

DNS queries are processed locally on your network. The appliance sends a daily check-in to VeloGuardian, which you can switch off in Settings from version 0.6.3. Query logs are stored locally and can be cleared at any time.

NetGuard is a WireGuard gateway appliance that provides secure remote access to your home or office LAN. Deploy it as a VM, and access your network from anywhere using the VeloGuardian app.

Import the NetGuard OVA (it comes with the Citadel plan) into your hypervisor, run the console setup wizard, then log in to the web dashboard. Register your devices from the VeloGuardian app and they receive their WireGuard configuration.

Not on your LAN. NetGuard works behind NAT. For remote access, forward UDP port 51820 on your router to the NetGuard appliance.

Only the account owner who set up the site can log into the appliance dashboard. Remote access peers are managed through the VeloGuardian app and require a CITADEL-tier subscription.

Updates are delivered as signed packages. The appliance checks automatically and notifies you when an update is available. You can apply updates from the web dashboard with one click.