Privacy-first VPN · mobile and desktop
Rover VPN
A VPN built around one question: who can see your traffic once it leaves the tunnel. Rover VPN ships mobile apps, a set of pre-configured global breakout locations, and the option to run your own breakout on infrastructure you control.
Breakout
Where your traffic re-enters the internet
The breakout is the point where traffic leaves the tunnel and reaches the public internet. Whoever operates it sees the traffic in the clear, minus whatever TLS protects. Most VPN products treat that point as an implementation detail. Rover VPN treats it as the product.
Pre-set global locations
- What it is
- Rover-operated breakout points in a set of global regions
- Pick by
- Region, in-app, per connection
- Use it for
- Roaming staff, travel, untrusted local networks, general privacy
- Transport
- WireGuard, or ZeroTier where the estate already uses it
Custom breakout (optional)
- What it is
- A breakout on infrastructure you nominate, in a region and jurisdiction you choose
- Egress IP
- Yours, and stable
- Use it for
- Traffic that has to appear to originate from your own network, or must not transit a third party at all
- Pairs with
- The same overlay the routers, switches, and RapidSTACK gateways join
Roam Home · managed service
Your home network, anywhere on earth
Roam Home is the custom breakout delivered as a managed service. A hardened Rover bridge appliance sits at your home, or any gateway location you designate, and holds an always-on encrypted tunnel. You run the Rover VPN on your own devices or a travel router you carry, and everything you reach sees the address of that gateway rather than the address of wherever you happen to be.
How it works
Provision
A hardened bridge appliance is pre-provisioned and shipped to the home or gateway location you nominate.
Connect
From anywhere, you connect over the Rover VPN on a laptop, a phone, or a travel router you carry with you.
Bridge
An always-on tunnel carries your traffic back to the bridge, which presents its own public address.
Manage
The NOC monitors, patches, and supports the appliance for the life of the deployment. You manage your own users through a portal.
Why a fixed address matters
What it solves
- Access friction
- No unusual-location lockouts, no repeated re-authentication, no allow-list breaking because you moved
- Geo-licensed services
- Home-region streaming, news, financial, and SaaS services behave the way they do at home
- Hostile networks
- Traffic leaves the local network inside a tunnel rather than trusting the venue or the host carrier
- Portability
- Change the designated gateway when an assignment changes
Who uses it
- Government
- Diplomatic, defence, and federal personnel on overseas assignment
- Deployed teams
- Expeditionary staff needing a consistent, trusted egress for mission and welfare traffic
- NGO
- Field staff working from austere or restrictive networks
- Commercial
- Contractors and coalition partners reaching enterprise portals from abroad, and executive travel
Appliance supply chain aligned to NDAA, TAA, DFARS and FCC requirements, with hardware root of trust. Service aligned to NIST SP 800-207.
Apps and clients
iOS and Android
Connect, switch breakout location, and reconnect on network change. The phone is the device most likely to be on a network nobody vetted, so it gets first-class treatment rather than a web portal.
Windows, macOS, Linux
Standard WireGuard clients, which means the client code carrying your traffic is open and widely reviewed rather than proprietary to a vendor.
Router-terminated
Terminate on a Rover Router instead of per device, so everything behind it is covered without an agent on each endpoint. Useful for a branch, a residence, or a temporary office.