App Lock
Face ID, Touch ID, Passcode, or 6-digit TOTP via authenticator app. Tunnel credentials stay protected on company devices — even if the device is left unattended.
MDM Support
Managed App Configuration for organizations. Push tunnels, enforce restriction keys, set device-integrity policies. App Lock disables automatically — MDM handles security.
Configuration Profiles
Deploy tunnels via .mobileconfig. Profile-installed tunnels appear read-only in the app — users see status, but they cannot tamper.
Keychain Storage
Private keys live in your device’s secure storage — the same place that guards Face ID and Touch ID data. Nothing sensitive sits in less-protected system files.
On-Demand Activation
Connect automatically by network type or Wi-Fi SSID. The tunnel connects before anyone has to think about it.
Custom Config Format
The .vylos format — a ZIP that keeps your original wireguard.conf untouched and stores Vylos-specific settings separately in an optional settings.conf, so the WireGuard configuration remains portable.
By the Numbers
3
Apple platforms
19
Languages supported
1
Purchase per device
0
Servers we touch
Deploy Tunnels with VPN Profiles
<!-- .mobileconfig VPN Payload -->
<dict>
<key>PayloadType</key>
<string>com.apple.vpn.managed</string>
<key>UserDefinedName</key>
<string>Corporate VPN</string>
<key>VPNType</key>
<string>VPN</string>
<key>VPNSubType</key>
<string>io.cbnventures.vylos</string>
<key>VPN</key>
<dict>
<key>AuthenticationMethod</key>
<string>Password</string>
<key>RemoteAddress</key>
<string>vpn.example.com:51820</string>
</dict>
<key>VendorConfig</key>
<dict>
<key>WgQuickConfig</key>
<string><!-- WireGuard configuration --></string>
</dict>
</dict>Push WireGuard tunnels to every device via standard .mobileconfig profiles. Managed tunnels appear read-only in the app — users see status, but IT controls the configuration.
Available for iOS, macOS, and visionOS
From the Blog
Product updates, VPN best practices, and managed deployment guides.
A Clearer Device Integrity Policy in Vylos 1.4.1
Vylos 1.4.1 introduces the enforceDeviceIntegrity key while preserving compatibility with existing blockJailbrokenDevices deployments.
Vylos 1.4.0 Comes to Mac and Apple Vision Pro
Vylos 1.4.0 brings WireGuard protection to Mac and Apple Vision Pro, adds an On-Demand kill switch, and strengthens managed deployment.
Reconnect Faster, Trust the Signals: Vylos 1.3.0
Vylos 1.3.0 adds one-tap reconnect from notifications, managed tunnel bandwidth charts, quieter alert throttling, and persistent app-lock rate limiting.