Enclave Network Platform

You don't connect to the
internet. You operate inside
your own Enclave.

Haven gives you private, ad-blocking DNS. Enclave VPN routes your traffic through our zero-log network. Sovereign adds encrypted cloud storage with Vaultyx. Together they form your complete Enclave — a privacy layer built from the ground up.

See Plans Free DNS Setup →

What's included

Haven Free tier
Private DNS — Blocks ads, trackers & malware

Haven is Katafract's DNS resolver network. Configure it in 60 seconds — no app required. The free tier blocks the obvious threats. The paid tier goes deeper: DoH/DoT encryption, custom blocklists, and query analytics on your device.

  • ✓ Ad & tracker blocking
  • ✓ Malware domain filtering
  • ✓ DNS-over-HTTPS / DNS-over-TLS
  • ✓ No query logging
  • ✓ Works on any device (iOS, Mac, Windows, router)
  • ✓ Custom blocklist rules (paid)
Free
Or $14.99/yr (save 37%) — free tier always available
Free DNS Setup Guide
Enclave
No-log VPN — WireGuard protocol

Enclave is a WireGuard-based VPN app for iPhone. Traffic exits through our nodes in Nuremberg, Helsinki, Singapore, Ashburn, and more. We keep no connection logs, no traffic logs, and no metadata that could identify you.

  • ✓ WireGuard protocol
  • ✓ No connection or traffic logs
  • ✓ Global exit nodes (EU, US, Asia)
  • ✓ Integrated Haven DNS (blocks ads while connected)
  • ✓ Kill switch
  • ✓ No account required
$8/month
Or $64/yr (save 33%) — includes Haven subscription
Get Enclave
Sovereign
Complete digital infrastructure — VPN, DNS, cloud storage

Sovereign is the most complete tier. Everything in Enclave plus Vaultyx encrypted cloud storage with 1TB, encrypted cloud backup for DocArmor, and unlimited device connections. Own your entire digital infrastructure.

  • ✓ Everything in Enclave
  • ✓ Vaultyx encrypted cloud storage — 1TB
  • ✓ FastCDC delta sync (only changed chunks upload)
  • ✓ DocArmor encrypted cloud backup included
  • ✓ Unlimited device connections
  • ✓ Dedicated support
$18/month
Or $144/yr (save 33%) · 7-day free trial
Get Sovereign
How it's built

Enclave is not a resold product. We run our own infrastructure, write our own software, and operate our own exit nodes. Every component is purpose-built for privacy.

01 · DNS
Haven DNS
AdGuard Home on each node, binding only on WireGuard interface. No public DNS exposure.
02 · Exits
WraithGate Nodes
WireGuard exit nodes in Nuremberg, Helsinki, Singapore, Tokyo, Mumbai, Ashburn, Portland, and Newark. nftables firewall, minimal attack surface.
03 · Mesh
ShroudNet Mesh
Private Headscale mesh connecting all nodes. Management traffic never touches the public internet.
04 · Control
Artemis Control
Internal control plane for node health, provisioning, and key rotation. Not publicly accessible.

Privacy commitments

What we don't keep

Not just policy — architecture. We can't produce records we don't hold.

No connection logs

We do not record when you connect, disconnect, or which server you connect to. Session metadata is discarded at session end.

No traffic logs

We do not inspect, log, or retain any information about the sites you visit or the data you transmit through the VPN.

No DNS query logs

Haven DNS resolvers do not log DNS queries or associate queries with IP addresses. No query history is retained.

No accounts

Enclave on iOS uses device-based entitlement verification. No email address or username is required to use the service.

Our warrant canary is updated quarterly to confirm we have not received any secret government orders.

Start with free DNS today

Haven DNS requires no app, no account, and no payment. Configure it in 60 seconds on any device.

Free DNS Setup Guide See All Plans