UMBRA is in active developmentJoin the beta →
Private beta · WireGuard · Mesh networking

Your data.
Your network.
Zero compromise.

UMBRA is an open-source VPN client that connects to your infrastructure. Not ours. Your traffic only flows through servers you control.

WireGuard
Protocol
E2E
E2E Encrypted
< 5ms
Typical latency
100%
Self-hostable
The problem

A classic VPN doesn't protect you.
It just moves your trust.

01
Your traffic goes through their servers.
You have no idea what they do with it, who has access, or how long they keep it.
02
Their clients are black boxes.
No independent code audit. You're trusting a company, not verifiable cryptography.
03
In case of a breach, acquisition, or legal request —
you're not consulted. Your data is on their servers, not yours.
There's another way.
CLI

Built for devs.

One command to connect your node. Everything else is configured from the dashboard.

Linux macOS Any VPS
umbra — zsh — 80×24
Features

Built for those who don't trust by default.

01
Zero third-party
UMBRA connects to your servers. We never touch your data — physically impossible.
Your servers onlyZero relay
02
Native WireGuard
The fastest and most audited protocol. Built directly into the Linux kernel.
<5ms
Kernel-native
03
100% open-source
Client, agent, API — everything goes public at launch. Read every commit, file an issue, open a PR.
Apache 2.0Auditable at v1
04
One interface, everywhere
Web dashboard, desktop and mobile app. Same codebase, same experience.
WebDesktopMobile
Preview

The interface at a glance.

Interface in active development.

UMBRA — Dashboard
Dashboard
4/5 nodes online
Nodes
raspi-home
100.64.0.1
Geneva, CHConnected2ms12%
synology-home
100.64.0.2
Geneva, CHOnline3ms8%
vps-frankfurt
100.64.0.3
Frankfurt, DEOnline8ms34%
vps-tokyo
100.64.0.4 CPU 78%
Tokyo, JPWarning52ms78%
vps-london
100.64.0.5
London, GBOffline
raspi-home — Geneva, CH
100.64.0.1 · WireGuard · umbra0
2ms
Latency
↑ 1.2 MB/s
Upload
↓ 4.8 MB/s
Download
How it works

Zero manual configuration.

No key exchange. No config files. One paste is all it takes to get everything running.

Note : UMBRA doesn't provide any servers. You bring the infrastructure, UMBRA handles the rest.
1
Deploy Umbra on your server
Run the install script on your VPS or personal server. Headscale, WireGuard, the API and the dashboard configure and start automatically.
$ curl -fsSL https://get.umbravpn.io | sh✓ Headscale · WireGuard · API · Dashboard
2
Add a node with one command
From the dashboard or CLI, enter your node's name and category. UMBRA generates a curl command — paste it in the target machine's terminal. The agent installs, WireGuard and auth configure themselves. Nothing else to do.
$ curl -sSL https://get.umbravpn.io | bash -s -- \  --name=raspi-home \  --token=umbra_reg_a4f2e9c3d1b0...
3
Connect from anywhere
Web client, desktop app, mobile or CLI — browse your nodes and connect in one click. Your traffic flows only through your servers.
● raspi-home — connected — 2ms
Transparency

Open-sourced at v1 launch.

The code will be published on GitHub at v1 launch. Dashboard, Go agent, API, desktop and mobile apps — everything will be public and auditable. Read every commit, file an issue, open a PR.

Your devices
macOS · Linux · iOS
UMBRA
Your servers
WireGuard · Headscale
E2E encrypted
Internet
via your infra
Zero third party — your data only flows through servers you control.
No need to trust us. Read the code.
Coming to GitHub →
Apache 2.0TypeScript + Nuxt 4Go agentWireGuard
Pricing

Pricing is coming.

No pricing plans until the app is finished. Join the waitlist to be notified first.

Use cases

Who is it for?

Developer
The remote dev

Connect your laptop to your homelab from anywhere. No exposed port, no opaque corporate VPN.

Engineering team
The distributed team

One node per region, one dashboard to see it all. Every team member on the same private network.

Privacy
The privacy enthusiast

Your traffic goes through your VPS. Nobody else has access — not your ISP, not a VPN company.

Be among the first
to try UMBRA.

UMBRA is in active development. Join the list and we'll reach out when the beta opens.