From scratch. Not reskin.

Your traffic,
on your tunnel.

HearthGate is a VPN we wrote ourselves — a custom TLS tunnel with no WireGuard, no drivers, no admin rights, and no connection logging.

Checking service status…

Honest by construction

🔒

Your own protocol

A framed TLS 1.3 tunnel we designed ourselves. The server and client were written together — nothing borrowed.

♻️

No drivers, no admin

Traffic is routed through a local proxy on your machine. Runs as a normal user — no kernel drivers, no elevation.

👁️

No logs, ever

We don't store connection metadata. Tunnel sessions are ephemeral and validated per-connection.

🔐

Pinned identity

The app pins each server's certificate fingerprint. No certificate authority in the middle of your tunnel.

Tunnel endpoints

Loading server list…

Get the app

💻 Windows desktop app
Single-file EXE, self-contained, self-updating from GitHub Releases. Version 0.1.0.
Download for Windows
🔒 Sign in
Create an account to register devices. Sign in once in the app — it grabs your device token automatically.
Sign in / up