Most VPNs give you one way in. We brought twenty-one.
When a network decides it dislikes the shape of your traffic, a single-protocol VPN simply stops working. Axon wraps the same encrypted tunnel in twenty-one different silhouettes — TLS, QUIC, WebSocket, WireGuard, even plain DNS — races them, and keeps whichever one your network actually lets through.
A blocked protocol is not a slow connection. It is no connection.
Censorship stopped being about IP addresses years ago. Modern filtering looks at the shape of a flow — its handshake, its packet sizes, its timing — and drops what it does not recognise. A VPN that speaks one protocol has one thing to recognise.
It races, it does not guess
The client dials several transports at once, takes the first that answers, and remembers it for this network. There is no protocol menu to work your way down.
It learns per network
What works on your home fibre and what works on a mobile carrier are rarely the same. The app keeps a separate answer for each and reaches for it first next time.
It survives us being blocked
Your entitlement is a short-lived signed token your device holds. Servers verify it offline. If our own API is unreachable, your VPN keeps connecting.
Three steps, and none of them involve us watching you
Your device makes a key
On first run the app generates a keypair and keeps the private half. That key is your account. We never see it, and there is no email or phone number attached to it.
We sign what you are entitled to
Your plan's limits — speed, data, which transports, which countries — are signed into a token that expires in hours. It says what you may do. It does not say who you are.
A server checks it without asking us
The exit verifies the signature locally and lets you through. It has no reason to report that you connected, so it does not, and there is no table here that could receive it.
Twenty-one silhouettes for one tunnel
The payload is identical in every case — the same modern handshake with forward secrecy and replay protection. What changes is what the traffic looks like from outside.
Highlighted transports are available on the free tier. The rest are reserved for paid plans because they need privileged sockets or cost considerably more server time per delivered byte.
The question is not what we promise. It is what we could produce.
Every VPN says it keeps no logs. A no-logs promise is a policy, and a policy can change, be overridden, or be compelled. What cannot be compelled is a column that does not exist.
| What we store | Exactly what is in it |
|---|---|
accounts | An opaque id, a hashed account code, a creation date, and the /24 network it was created from. |
devices | A public key your device generated. We have never held the other half. |
grants | That an entitlement token was issued and when it expires — never that it was used. |
usage_daily | One number: bytes per account per day. No server, no address, no destination, no time of day. |
There is no sessions table. No column anywhere puts an account next to a place or a moment of connection. That is not a retention setting we could quietly change — it is the shape of the database.
Straightforward, and cancellable in one tap
Free
No card, no expiry
- 20 GB of traffic per month
- 1 device
- 10 Mbit/s
- 8 of 21 transports
- Premium exit locations
Standard
$4.00 USD billed monthly, renews automatically
- Unmetered traffic
- 5 devices
- No speed limit
- All 21 transports
- All standard locations
Plus
$7.00 USD billed monthly, renews automatically
- Everything in Standard
- 10 devices
- Premium exit addresses
- Priority capacity at peak
- Priority support
Prices in US dollars. Subscriptions renew automatically until cancelled. See full pricing terms and our refund policy.
Things worth asking before you trust a VPN
Do I need to give you an email address?
No. The app generates a keypair on first run and that is your account. You are shown a 16-digit account code once, which is how you move a subscription to another device — keep it somewhere safe, because we cannot look it up for you. If you buy a subscription, our payment processor will hold billing details for the card, which we cannot link back to your traffic.
What happens if your service goes down or gets blocked?
Existing sessions keep working. Your device holds a signed entitlement that exit servers verify offline, so once you have one you can connect and reconnect for its lifetime without reaching us at all. The list of servers is also signed and cached, so a blocked API address does not mean a blocked product.
Is this legal to use?
Using a VPN is lawful in most countries, but not all, and some place conditions on it. You are responsible for knowing the law where you are and for what you do through the connection. Our acceptable use policy sets out what we do not allow, and we enforce it.
Why should I believe the no-logs claim?
You should not believe it on our word — that is precisely the point of the table above. We publish what the database can hold, and the design puts the entitlement check on the exit server rather than in a call back to us, so there is no moment at which a record of your connection would naturally be created. An independent audit is planned before general availability.
Can I use it on more than one device?
The free tier is one device. Standard covers five and Plus covers ten, counted as devices holding a live entitlement. Removing a device in the app frees its slot immediately.
How do I cancel?
In the app, or by emailing support@axonvpn.com. Cancelling stops the next renewal and you keep access until the end of the period you already paid for. There is no cancellation fee and no minimum term.
Try it on the network that is giving you trouble
The free tier is 20 GB a month with no card, no email and no trial clock. If it cannot get through on your network, nothing here costs you anything.