SafeNet is a private VPN service originally built for customers running OSS SecureNet. One year running. Zero unplanned downtime. Zero security events. Now available as a standalone subscription.
SafeNet has been running for OSS SecureNet customers for about a year. Four US locations: Chicago, LA, Dallas, and Ashburn. WireGuard tunnels, 2 million domains blocked at DNS, 55,000 IPs filtered at the firewall.
Customers started asking if their phones could use it. If their college kids could get on. If they could subscribe without the full SecureNet buildout. So we opened it up. Same servers, same rules, same transparency. $60 a year, one peer.
The reason VPN experiences get worse over time isn't bad luck. It's the business model. Anyone with a credit card gets an IP. Abusers, scrapers, spammers, pirates, bots. You share that IP with all of them.
Spamhaus, Cloudflare, StopForumSpam. Your VPN's IPs show up on abuse lists because someone else on your IP broke the rules. You pay the price.
Unlimited signups means unlimited users on every IP. When one of them runs a scraper or hammers a login endpoint, every site you visit next starts asking you to prove you're human.
Your connection randomly slows. Sites stop loading. Support blames "network conditions." The actual reason (server overload, IP reputation, shaping) is a black box you're not allowed to look into.
We cap each server at 300 peers and spin up a new one before the existing one gets crowded. We block the traffic that gets VPN IPs blacklisted (torrents, Usenet, bulk download hosts) at DNS and firewall. We publish the blocklist, the server configs, and the weekly security audits for anyone to audit.
The result: your IP behaves like a normal home IP. Fewer CAPTCHAs. Fewer blocklists. Honest speed at honest load.
We're honest about this up front so you can decide before you pay, not after you're frustrated.
Streaming services actively fight VPNs anyway. We'd rather tell you streaming won't work than watch your Netflix die at random and blame the internet.
Most VPNs oversell their servers because more peers per server means more margin per server. When the server gets crowded, your speeds drop and nobody tells you why.
We cap each SafeNet server at 300 peers. When a server approaches capacity, we add another one in the same location. When a location is maxed and we can't add more hardware, we stop selling there. No exceptions.
You can watch the live metrics yourself: CPU, RAM, peer count, throughput. The second buffering or latency shows up from overcrowding, you'll see it before we do.
SafeNet isn't trying to be Mullvad or Proton. They're good at what they do. We're good at what we do. Here's what that means in practice.
| Transparency | SafeNet | Mullvad | Proton | NordVPN |
|---|---|---|---|---|
| Domains blocked | ~2,000,000 | ~1,000,000 | Not published | Not published |
| Blocklist file published | ✓ Plain text | ✓ GitHub | ✗ | ✗ |
| Weekly Lynis audit (public) | ✓ | ✗ | ✗ | ✗ |
| Weekly rkhunter scan (public) | ✓ | ✗ | ✗ | ✗ |
| Daily filesystem hashes (public) | ✓ | ✗ | ✗ | ✗ |
| Live server metrics (to customers) | ✓ | ✗ | Limited | ✗ |
| Server configs on public git | ✓ Forgejo | Partial | ✗ | ✗ |
| Warrant canary | ✓ Monthly | ✗ | Transparency report | ✓ |
| Account system | None. Pubkey is the subscription. | Anonymous account | Email + password | Email + password |
| Server hopping | One server, one IP | Yes | Yes | Yes |
| Torrenting | Blocked | Allowed | Allowed | Allowed |
| Streaming | Blocked | Mixed | Marketed | Marketed |
If you need a VPN that lets you stream Netflix from another country or torrent, those are good services. Go buy one. SafeNet isn't for you, and we'd rather tell you now.
Every server runs a battery of security scans every week and publishes the raw output. No editing. No cherry-picking. No marketing.
You don't need an account. You don't need to email anyone. You can curl every one of these from your terminal right now.
Annual billing only. US residents, 21 and up. That's the whole pitch.
Cards, Apple Pay, Cash App Pay, Google Pay, Link via Stripe. US billing address required. 21+ affirmation at checkout.
Because abuse is contained by design, not by promise. One peer, one IP, one human means when something goes sideways on an IP, we know exactly whose peer to eject. It's the reason the IPs stay clean.
If you need whole-home coverage for every device in your house, that's what OSS SecureNet is for. A professionally configured firewall with SafeNet built in, so every device on your network is tunneled without installing anything on any of them.
Because datacenter VPN IPs get flagged by streaming services whether we like it or not. Netflix, Hulu, Disney+, and the rest actively fight VPN traffic. Your Netflix will break at random and nobody will tell you why.
We block streaming at DNS up front so you know before you pay. If streaming is what you need a VPN for, buy a different VPN. Seriously.
Depends on how far you are from the nearest location. We have four: Chicago, LA, Dallas, and Ashburn. That covers the Midwest and Great Lakes, West Coast, South Central, and East Coast. For most users in US population centers, you'll see a few milliseconds to a few tens of milliseconds added on top of your normal internet connection.
Starlink, rural cellular, and satellite connections add their own latency regardless of VPN. If your starting point is 200ms, SafeNet isn't going to magically make it 40ms.
We watch latency server-side and add capacity per location as demand grows. International expansion isn't on the roadmap. This is a US service.
Because SafeNet is a curated service. Curation starts at the door. We built SafeNet for mature US-based adults who want honest private browsing, not international streaming tourists or people who were never our customer to begin with.
Checkout requires a US billing address (Stripe enforces this) and a 21+ affirmation tied to the Terms of Service. Breach the representation, lose the service. No refund.
Annual billing filters for customers who take the service seriously. It also makes chargeback fraud harder, which keeps abuse off the network, which keeps the IPs clean for everyone who's actually here to use it.
$60 a year is $5 a month. If that's the wrong price, SafeNet is the wrong product.
No. SafeNet's eligibility rules (US residents, 21+) depend on Stripe's billing-address verification. Crypto payments bypass that check, so they'd create a hole in the filter we work hard to keep clean.
If a payment path becomes available that preserves that filter, we'll revisit. For now, Stripe only.
Yes. One peer per subscription means one device per subscription on the SafeNet side. You can absolutely buy two (or three) and assign them to different devices.
If you want every device in your house tunneled without managing subscriptions or installing WireGuard on everything, OSS SecureNet does that at the firewall level. One system, every device covered.
We cap each server at 300 peers. When a server approaches capacity, we spin up a new one in the same region. When we can't add a server (data center availability, hardware lead time), we stop accepting new customers in that region.
No oversell. No quiet throttling. If you're already a customer on a server, your performance is protected because the cap exists.
Your WireGuard public key and your assigned tunnel IP. That's it. No email, no name, no address, no login, no password, no DNS query logs, no browsing history.
Stripe handles billing and keeps billing data on their side. SafeNet never sees your name or email.
SafeNet is operated by Open Source Security, Inc., a Delaware S-Corp. We build professionally configured OPNsense firewall systems (OSS SecureNet). SafeNet is the standalone public version of the VPN that ships with every SecureNet system.
Same infrastructure, same philosophy, now available without buying hardware.
You generate a WireGuard keypair locally on your device (in-browser or via the WireGuard app), paste the public key into the signup form, and pay via Stripe. The private key never leaves your device. We provision your peer, sign your config, and hand it back to you for download. You install it in WireGuard and you're done.
No account to create. No password to remember. No login.
$60 per year. One peer. One honest IP. No account. No upsell. No bullshit.
SafeNet is one peer per subscription by design. If you want every device in your house tunneled, without managing subscriptions per device, that's what OSS SecureNet is built for. Professionally configured OPNsense firewall, SafeNet VPN included, you own everything.
Visit opensourcesecurity.net →