Per-Connection Privacy, System-Wide

Most VPNs route all traffic through a single exit node. SPN routes each connection through a separate path across different nodes, applying layered encryption at each hop, providing per-connection IP separation across all your applications.

Get Multiple Identities for Each App

SPN calculates a separate path for each connection, routing it through different nodes and exit points. Each app gets a distinct IP address at a different location.

Configurable Privacy

Exclude specific apps or domains from SPN, or restrict exit nodes to certain countries. Each setting is optional. The defaults work for most users without any changes.

Built from Scratch,
for Your Privacy

Inspired by Tor, SPN uses onion routing with layered encryption at each hop. The source code is available to inspect and audit.

Inspect source code

SPN in Action

Watch a short video showing how SPN routes each app's connections through separate paths.

Feature Comparison

Most VPNs
Read Comparison Blog
SPN Tor
Multiple Identities (simultaneous)
Automatic Geo-Unblocking
Individual Apps Settings
Easy Setup Browser Only
Availabilty
Open Source /

Upgrade Your Privacy

Built with onion routing and layered encryption, designed to protect your network identity at the connection level.

Per Month Per Year
Portmaster Free
Free / Forever

Regain Control.

Features Privacy Investigative Features Priority Support SPN 🢂 Full Comparison
Portmaster Plus
Annual only

Investigate deeper.

Features Privacy Investigative Features Priority Support SPN 🢂 Full Comparison
Portmaster Pro
8€ / Month

Full coverage.

Features Privacy Investigative Features Priority Support SPN 🢂 Full Comparison
Portmaster Free
Free / Forever

Regain Control.

Features Privacy Investigative Features Priority Support SPN 🢂 Full Comparison
Portmaster Plus
40€ / Year

Investigate deeper.

Features Privacy Investigative Features Priority Support SPN 🢂 Full Comparison
Portmaster Pro
80€ / Year

Full coverage.

Features Privacy Investigative Features Priority Support SPN 🢂 Full Comparison

FAQ

You have more questions? Join the Discord community.

VPN technology was originally designed to connect company networks. The SPN routes each connection independently through different exit nodes, applying layered onion encryption at each hop. For users whose threat model requires per-connection IP separation and onion routing across all applications, SPN offers a different architecture.

Read the full comparison.
You can pay with your credit card, PayPal, cash and crypto currencies (BTC, XMR).
Yes - we support Bitcoin and Monero. Aside from that we also support credit card, PayPal and cash payments.
The SPN is heavily inspired by Tor, but the mission is different. Next to tightly integrating with other privacy modules, the SPN protects all your computer's connections, not just your browser. Additionally it spreads your connections across the globe instead of routing everything through the same circuit.

Read our comparison blog to find out more.
Yes, when enabled Portmaster routes all internet connections through the SPN. You can create exceptions for specific apps or processes.
Yes. Every connection is routed separately, giving you a separate IP address for each connection.

View this explainer image showing a computer connecting to Steam, ProtonMail and Spotify.
No, it routes every connection individually. So as an example, when you open several websites in different tabs in your browser, every connection will be calculated individually - giving you multiple identities for each app.
No. This is just one piece of the puzzle. The SPN primarily protects your IP address from exposure, but there are still many other ways services can track and identify you. These include fingerprinting (mostly in browsers), authentication (when logged in to a service), and malicious JavaScript.
Yes, this is just one piece of the puzzle. There are multiple ways services track you, like browser fingerprinting and malicious JavaScript. And if you log into services, such as your Google account, they will mostly still know it is you, even though you protect your IP address.
The SPN reroutes all your computer's connections, including those of your browser.
Yes. All serious websites use secure https connections, which encrypts the content of your connection (like login credentials) before Portmaster wraps them in onion encryption. So no ISP architecture or SPN exit node will be able to manipulate that data. It is protected by https all the way to the destination server.
Since the SPN is integrated into Portmaster, we support the same platforms as Portmaster software. Currently these are Windows and Linux. Mac and Mobile are planned but not yet available.
No. Providing the network costs us money, so we charge accordingly. Portmaster's local privacy features remain free to use.
The source code is available on Github. The Portmaster, the Portmaster UI, the SPN, the docs and this website have their respective repositories. Jess, the heart of the SPN, which got audited by Cure53, can also be found online.

SPN News

Read everything about the latest updates regarding Portmaster, SPN and Safing.