Enclave Network Platform
Haven gives you private, ad-blocking DNS. WraithVPN routes your traffic through our zero-log network. Together they form Enclave — a privacy layer built from the ground up.
What's included
Haven is Katafract's DNS resolver network. Configure it in 60 seconds — no app required. The free tier blocks the obvious threats. The paid tier goes deeper: DoH/DoT encryption, custom blocklists, and query analytics on your device.
WraithVPN is a WireGuard-based VPN app for iPhone. Traffic exits through our WraithGate nodes in Frankfurt, Helsinki, Singapore, and US Central. We keep no connection logs, no traffic logs, and no metadata that could identify you.
Enclave is the complete privacy platform. Build on everything in WraithVPN with multi-device support (up to 10), priority node access, unlimited email aliases, advanced blocklist controls, and early access to new features.
Enclave is not a resold product. We run our own infrastructure, write our own software, and operate our own exit nodes. Every component is purpose-built for privacy.
Privacy commitments
Not just policy — architecture. We can't produce records we don't hold.
We do not record when you connect, disconnect, or which server you connect to. Session metadata is discarded at session end.
We do not inspect, log, or retain any information about the sites you visit or the data you transmit through the VPN.
Haven DNS resolvers do not log DNS queries or associate queries with IP addresses. No query history is retained.
WraithVPN on iOS uses device-based entitlement verification. No email address or username is required to use the service.
Our warrant canary is updated quarterly to confirm we have not received any secret government orders.
Haven DNS requires no app, no account, and no payment. Configure it in 60 seconds on any device.