Skip to content
Sentinel

Build your own decentralized VPN.

The most resilient peer-to-peer networking protocol designed to be censorship-resistant for any geography. Read more

  • A perpetual, on-chain DHT — consensus-protected, censorship-resistant.
  • Zero bootstrap nodes, zero central servers to seize.
  • Bandwidth contributed by independent operators in 70+ countries.
  • Any client can join with nothing more than an RPC endpoint.
1,418,375people use dVPN apps built on Sentinel
Use a dVPN App Build a dVPN App Host a dVPN Node
8+
dApps built on Sentinel
1.4M+
Total Users
1500+
P2P Bandwidth Providers
6+ PB
Data Consumed

You can't trust centralized VPNs.

A centralized VPN only moves your trust from your ISP to a VPN company — a single point of control that now sees all of your traffic, not just some of it.

Centralized VPN
One entity controls every server, every key, every log.
Sentinel dVPN
No single entity exists that could compromise the network.

All user traffic passes through company infrastructure.

Traffic routes directly to your chosen node — no relay layer.

"No-log" is a legal promise, not a technical guarantee.

No company exists that could log your traffic.

Server software is proprietary and unauditable.

All code open source — node, client, protocol, SDK.

Subject to subpoenas, gag orders, FISA, NSLs.

No single jurisdiction governs the network.

Can be compelled to install logging silently.

On-chain session authorization — cryptographic, not corporate.

Auto-update is a trusted code execution path.

Protocol governed by validators, not a board.

Corporate acquisition can change policies overnight.

WireGuard / V2Ray end-to-end — keys never leave your device.

Don't trust a centralized VPN, trust a decentralized VPN Built on Sentinel

dVPN Applications built on Sentinel are used by 1.4M+ users.

Independent VPN

Independent VPN

Free Decentralized VPN on Sentinel-WireGuard & V2Ray; Android & iOS.

Download App:
Ryn VPN

Ryn VPN

Sentinel-powered privacy VPN with a clean minimalist interface and a user base of over 10 million people.

Download App:
Sentinel Shield

Sentinel Shield

Flagship open-source dVPN by Sentinel P2P, WireGuard & V2Ray; Android & iOS.

Download App:
DVPN by NORSE

DVPN by NORSE

Decentralized VPN experience wrapped into user-friendly apps for all platforms.

Download App:
VALT

VALT

VALT is the only app available that allows you to capture and protect the data you create everyday.

Download App:
MeileVPN

MeileVPN

Sentinel-powered desktop dVPN for macOS, Linux & Windows.

Download App:

Make your own dVPN

Use the Sentinel SDK to ship your own decentralized VPN — your brand, your protocol, your distribution.

Start building →

Everything a dVPN builder needs. Handled.

Compute, bandwidth, payments, security — the Sentinel protocol runs the entire white-label stack underneath your brand. You build the app. The network does the rest.

01 / 04

Direct Node Probe

HTTPS request directly to the node’s remote address. Returns live status: protocol type, peer count, location, bandwidth. Peer-to-peer, no relay.

02 / 04

On-Chain Session

Signed transaction creates an immutable session record on the blockchain. Session ID, node address, account address — all consensus-validated.

03 / 04

Verified Handshake

Node receives request, queries the chain to verify the session matches. Only then generates VPN credentials. Authorization is on-chain.

04 / 04

Encrypted Tunnel

WireGuard (Curve25519) or V2Ray (VLess/VMess) tunnel established directly between client and node. End-to-end encrypted. Zero intermediaries.

No centralized server is involved at any step.The blockchain is the backend.

The blockchain IS the backend

  • Every node, session, and account lives on-chain.
  • Discovery is a chain query — nothing to take down.
  • Finality, Sybil resistance, and governance built in.

Validators provide the compute

  • Sessions, plans, and payouts verified by Sentinel’s validators.
  • That consensus compute is your backend: no servers to run.
  • Every state change is final and tamper-proof.

Pay for bandwidth directly in P2P

  • Wallets pay node operators directly on-chain — no invoices.
  • Pick nodes by country, price, or protocol.
  • Pay in P2P for bandwidth, Sentinel’s native token.

1500+ servers, zero server ops

  • Bandwidth from 1500+ servers run by independent operators.
  • 90+ countries across six continents.
  • Racking, patching, and scaling — abstracted away entirely.
View Global Node Map
WireGuardKernel-fast encrypted tunnelsV2RayVMess / VLESS · anti-censorship
United StatesJapanGermanyBrazilUnited KingdomSwedenNetherlandsSingaporeSwitzerland+ 80 more

Closed-source VPNs ask for your trust. Sentinel is the only open-source, decentralized framework to build a VPN application on — full transparency into the application-side code and the server-side code alike.

View open-source code on GitHub

Every layer of Sentinel is open source

Nothing in the stack is closed — read, audit, and fork all of it.

SDKsClient libraries in JavaScript, C#, Go & Swift
ProtocolWireGuard & V2Ray session layer
ChainSentinel Hub, built on the Cosmos SDK
Node softwareThe dVPN node anyone can run and inspect

Build in the language you already use

Four official SDKs — every one of them open source.

JavaScriptC# / .NETGoSwift
4SDK languages41,000+lines of open code

Three steps from zero to a production dVPN.

Step 01 / 03

Add nodes to your subscription plan.

Pay dVPN nodes and add them to your subscription plan. Filter by country, encryption protocol and more to find nodes that meet your application’s capacity needs.

Adding nodes to a subscription plan in the Plan Manager
Open Plan Manager
Step 02 / 03

Build a dVPN for Any Platform

The Sentinel SDK runs on phones, desktops, browsers, TVs and servers. You build the app and own the brand. The network handles bandwidth, routing and payments.

iOS

Ship an App Store client. The Network Extension tunnel is already built.

SwiftReact Native
Android

Ship a Play Store app on VpnService. WireGuard and V2Ray included.

KotlinReact Native
macOS

Build a menu-bar app that tunnels all system traffic.

SwiftElectron
Windows

Build a desktop client for the OS most people use.

Electron.NET
Linux

Run headless daemons on servers, routers and homelabs.

CLIdaemon
Web

Build browser extensions and dashboards. Users install nothing.

TypeScriptWASM
TV

Build TV apps designed for the remote control.

Android TVtvOS
Server

Route traffic from code. Bots, backends and AI agents.

NodeGo
SDK DocsView on GitHub
Step 03 / 03
VISAPay

Integrate Any Payment Rails

Accept fiat payments, crypto payments, or set any conditional trigger to authorize a user for free VPN services.

VISA
Credit / Debit Card
Sell dVPN access with Visa, Mastercard, Amex and more — through any payment processor you choose.
PayPay
Apple Pay / Google Pay
Charge for your dVPN with one-tap Apple Pay or Google Pay checkout, on the web or in your app.
Stripe
Bill your dVPN through Stripe Checkout or Billing — payment confirmed by webhook, access granted in the same flow.
Digital Currencies
Accept BTC, SOL, ZEC or any other chain for dVPN access, via the processor of your choice.
Free VPN
Grant free dVPN access on any condition you set — ads watched, offers completed, referrals made.
Integrate Any Payment Rail into your dVPN

Host a dVPN Node. Earn Bandwidth Rewards.

Run a Sentinel Node in minutes and join 1500+ operators across the world and provide your bandwidth to the future of decentralized privacy.

Host a dVPN Node on Your Device

Host a dVPN Node on Your Device

Run a Wireguard or V2Ray dVPN Node on your Windows, Mac, or Linux machine and start earning today!

Host dVPN Nodes on the Cloud

Host dVPN Nodes on the Cloud

SSH into any cloud server and deploy dVPN nodes in batches — spin up, monitor, and manage your entire fleet from one place.

The first decentralized VPN network for AI agents.

Agents get privacy and bypass geo-restrictions on their own — no API keys, no accounts, no human. A full day of VPN costs $0.033, paid autonomously in USDC.

Pay on BaseSolanaSOON
1

Request access

Your agent calls the connect endpoint — 1, 7 or 30 days.

2

Get the price

Sentinel replies with the cost: $0.033 for a full day.

3

Pay automatically

The agent signs the USDC payment itself. Settles in ~2 seconds.

4

Tunnel up

Encrypted WireGuard connection. No API keys, no accounts, no human.

CONNECT YOUR AGENT
Claude Agent
ChatGPT Agent
Gemini Agent

How Sentinel's architecture compares to leading P2P networks.

Take away the founding organization. Block the bootstrap servers. What keeps running?

DiscoveryCosmos-SDK blockchain
BootstrapNone — any RPC endpoint
Entry points∞ permissionless
Sybil resistanceOn-chain registration TX
State consistencyFinality · ~6s blocks
GovernanceOn-chain validator votes
If org disappearsValidators continue
VerdictNothing to block
Discovery is on-chain, entry points are permissionless, and the registry lives as long as anyone runs a validator. Block the team and the network is unaffected.

Tor

The Onion Router

Discovery9 Directory Authorities
Routing3-hop circuit (slow)
Central failureDirectory Authorities
If org disappearsNetwork degrades
Failure mode · Central directory9 organizations control the network's directory. Compromise or block them and Tor falls.

Other on-chain P2P networks

Cross-protocol comparison

DiscoveryCentralized API servers
Node registryCompany-operated
If company disappearsNetwork dies
Open client SDKProprietary or limited
Failure mode · Company serversDiscovery and coordination still depend on company-operated servers. Not truly decentralized at the networking layer.

IPFS / Filecoin

Decentralized storage

DHTKademlia (libp2p)
Bootstrap~6 hardcoded peers
Seedsbootstrap.libp2p.io (Protocol Labs)
Sybil resistanceWeak
Failure mode · Hardcoded peersKubo ships with ~6 hardcoded Protocol Labs bootstrap peers; block them, and fresh nodes can’t join the DHT.

BitTorrent

File sharing protocol

DHTMainline Kademlia
Bootstrap~5 hardcoded hosts
Seedsrouter.bittorrent.com, dht.transmissionbt.com...
Sybil resistanceWeak (free to flood)
Failure mode · Hardcoded hostsMainline DHT relies on ~5 hardcoded bootstrap hosts; existing clients can persist peers, but blocking those hosts prevents new users from joining.

I2P

Invisible Internet Project

DiscoveryHardcoded reseed URLs
Bootstrap~8 reseed servers
Seedsreseed.i2p-projekt.de
If blockedNew users can't join
Failure mode · Reseed serversHardcoded reseed URLs. Block ~8 domains and new users cannot bootstrap into the network.

Most networks rely on fixed entry points that censors can block. Sentinel uses permissionless RPC endpoints — anyone can run one, anywhere. As long as one endpoint is reachable, the network remains accessible.

Join the Community

The Sentinel community goes beyond the chain.

More from the community