VanGuard · VanCloak Technology™ · VCP/1.0
Early AccessVanGuard · Sovereign VPN · Luminous.Works
Not a shared server. Not a Silicon Valley VPN. VanGuard runs on your infrastructure — encrypted with post-quantum VanCloak, always-on, zero telemetry. Your data never touches a server you don't own.
Why VanGuard
Commercial VPNs route your traffic through their servers, their logs, their jurisdiction. VanGuard routes your traffic through yours — with a protocol built from the ground up for the BlackBox threat model.
Before any tunnel drops, the kill switch fires. Every time. No traffic leaves your machine unencrypted — not for a millisecond. The gap between networks is where breaches happen. VanGuard closes it.
0ms exposure windowVanGuard polls your network interfaces every 2 seconds. New WiFi, hotel hotspot, ethernet — the moment an interface change is detected, the reconnect sequence executes automatically. You don't have to think about it.
2s poll intervalVanCloak wraps your traffic in X25519 key exchange plus ML-KEM-768 post-quantum lattice cryptography per NIST FIPS 203. Harvest-now-decrypt-later attacks yield nothing. Future-proofed by design.
ML-KEM-768 · NIST FIPS 203VanCloak tunnels over TLS 1.3 on port 443. To every deep packet inspection system, firewall, and hostile network — your traffic is indistinguishable from standard web traffic. No VPN fingerprint to block.
DPI-resistant · TLS 1.3VanGuard lives in your system tray. It starts with your OS, monitors your network silently, and acts before any application can make an unprotected request. You never have to remember to turn it on.
Background · Zero frictionYou provision the server. VanGuard connects to it. No shared exit nodes, no trust required in a VPN provider's no-log policy, no legal jurisdiction you didn't choose. Full network sovereignty from day one.
Self-hosted · No third partiesBlackBox VanGuard · Live Preview
System tray. Always on. Kill switch armed. Your sovereign tunnel at a glance.
How It Works
Commercial VPNs insert a trusted third party into your network path. VanGuard removes them entirely. The only nodes in your tunnel are yours.
Network Path Comparison
Without VanGuard · Exposed
With VanGuard · Protected
The Reconnect Sequence
The gap between networks is where you get compromised. VanGuard's reconnect engine fires every step in fixed sequence with no room for a race condition.
VanCloak Protocol · VCP/1.0
VanCloak VCP/1.0 is a purpose-built encrypted tunnel protocol designed from first principles for the BlackBox threat model. Every byte is intentional. Every parameter was chosen for a reason.
Protocol Specification · VCP/1.0 · Provisional Patent Pending
vs. Commercial VPN
Commercial VPNs share exit nodes across thousands of users, operate under foreign legal jurisdictions, maintain logs under lawful intercept requirements, and route traffic through infrastructure you will never audit. VanGuard runs on your server. No shared nodes. No foreign jurisdiction. No logs to serve.
vs. WireGuard / OpenVPN
WireGuard and OpenVPN are excellent protocols — but they produce identifiable traffic fingerprints that hostile networks, DPI appliances, and state-level firewalls block on sight. VanCloak's TLS 1.3 transport is indistinguishable from HTTPS. It crosses the same firewalls your browser does.
— Luminous.Works LLC · Appleton, Wisconsin
BlackBox Industries · VanCloak VCP/1.0 · Patent Pending · March 2026 · ∩R = {Ψ(i)}
Pricing
VanGuard runs on your server. The price covers the software, the support, and the protocol. The infrastructure is yours — from day one.
VanGuard is in early access. Contact us to get started — we'll provision your configuration and walk you through server setup.
✓ Zero telemetry · ✓ No accounts · ✓ Open protocol · ✓ Your server only