CyveraVPN architecture
Features built to resist analysis and correlation.
Data/control plane isolation, ephemeral keys, dynamic multi-hops, and network anomaly detection. Every component is auditable and documented.
20-min rotation
Verifiable multi-hop tunnels
Geographically distinct relays with random selection and automatic rotation every 20 minutes.
XChaCha20
Zero-trace memory encryption
Ephemeral XChaCha20-Poly1305 keys, RAM-only storage, immediate purge after disconnect.
Public reports
Audits and transparency
Bi-monthly infrastructure transparency, public bounties, integrity reports accessible without account.
Masked SNI
Advanced anti-correlation
Segregated control/data planes, rotating WireGuard addressing, obfuscated SNI.
Security
No logging
- No traffic, DNS, or session metadata logs.
- Ephemeral technical logs encrypted, purged in under 12h.
- No behavioral telemetry. No trackers.
Security
Proven encryption
- WireGuard, OpenVPN, TLS 1.3, Perfect Forward Secrecy.
- AES-NI acceleration, XChaCha20-Poly1305 by default.
- Double-pass key wipe in memory.
Security
Privacy-first jurisdiction
- Hosted in privacy-friendly locations without retention laws.
- Entity registered outside 5/9/14 Eyes.
- Public and verifiable warrant canary procedures.
Security
Openness and audits
- Open-source clients audited annually.
- Independent pentests with published scopes.
- Security bounties, guaranteed responsible disclosure.
Coverage
80+ locations with smart-edge relays.
Optimized peering, premium transit, dynamic MTU negotiation, and built-in DDoS mitigation. Kill switch enforced on every app.