Enclave Platform
Simple, honest pricing
When we run compute on your behalf — servers, nodes, infrastructure — we charge a subscription. When the app runs on your device, it's one-time. No surprises.
Monthly
Save 37%
iOS Apps
Armor Apps
Device-side privacy tools. Runs entirely on your phone, no servers involved.
$2.99
one-time per app
- ✓ ExifArmor — strip photo metadata
- ✓ ParkArmor — save your parking spot
- ✓ DocArmor — encrypted document vault
- ✓ No cloud, no account, no tracking
- – Network protection
- – VPN routing
Haven · DNS
Haven
Encrypted DNS with ad, tracker, and malware blocking. No account required.
$1.99
/ month
billed $14.99/year — save 37%
- ✓ Encrypted DNS (DoH + DoT)
- ✓ Ad + tracker blocking
- ✓ Malware + phishing domains blocked
- ✓ Works on all devices
- ✓ No query logs
- – VPN routing
- – Alias Guard
WraithVPN · Popular
WraithVPN
Haven + VPN + Alias Guard + Exposure Alerts. Token-based — we never store your identity.
$4.99
/ month
billed $39.99/year — save 33%
- ✓ WraithVPN — 4 global WraithGate nodes
- ✓ Haven DNS included
- ✓ 3 Alias Guard email aliases
- ✓ Exposure alerts
- ✓ Connect on 5 devices
- ✓ No logs · No identity stored
Enclave · Full Platform
Enclave
Everything in WraithVPN plus multi-device and priority access. Full platform experience.
$9.99
/ month
billed $79.99/year — save 33%
- ✓ Everything in WraithVPN
- ✓ Up to 10 devices
- ✓ Priority node access
- ✓ Unlimited Alias Guard aliases
- ✓ Advanced blocklist controls
- ✓ Early access to new features
Haven DNS — always free, no account
Basic DNS protection — ad blocking, tracker blocking — is available without a subscription. Just point your DNS to our servers. Nothing to install, no sign-up.
iPhone
dns.katafract.com
Android
dns.katafract.com
macOS
dns.katafract.com
Router
dns.katafract.com
Full comparison
| Feature | Apps | Haven | WraithVPN | Enclave |
|---|---|---|---|---|
| Ad + tracker blocking | — | ✓ | ✓ | ✓ |
| Malware domain blocking | — | ✓ | ✓ | ✓ |
| WraithVPN | — | — | ✓ | ✓ |
| Global exit nodes | — | — | 4 regions | 4 regions |
| Alias Guard (email aliases) | — | — | 3 aliases | Unlimited |
| Exposure alerts | — | — | ✓ | ✓ |
| No identity stored | ✓ | ✓ | ✓ | ✓ |
| No logs | ✓ | ✓ | ✓ | ✓ |
| iOS app | ✓ | ✓ | ✓ | ✓ |
| Android app | — | soon | soon | soon |
| Mac + Windows (config file) | — | — | ✓ | ✓ |
| Devices included | unlimited | unlimited | 5 | 10 |
Questions
Do you log my connections or DNS queries?
No. We store no connection logs, no DNS query logs, no IP addresses. The token you use to authenticate is stored as a one-way hash — we cannot reverse it to identify you. By design, we have nothing to hand over.
What happens if I reinstall the app or lose my token?
For Stripe subscribers, use the recovery flow at connect.katafract.com — enter your subscription ID and we'll send a recovery link to your receipt email. For App Store purchases, your token is tied to your Apple transaction ID and can be re-issued automatically on reinstall.
How do I use this on Windows or Linux?
Visit connect.katafract.com, paste your subscription token, and download a WireGuard .conf file or scan the QR code. Import it into the WireGuard app (available on all platforms). No extra software needed.
What payment methods do you accept?
Card (Visa, Mastercard, Amex), Apple Pay, Google Pay, and SEPA/BACS direct debit for EU and UK customers. In-app purchases via the App Store or Google Play use their respective payment systems. Crypto payment (Monero, Lightning) is available for maximum privacy.
Can I cancel anytime?
Yes. Cancel through the customer portal, the App Store, or by emailing support@katafract.com. Your access continues until the end of the billing period. There's a 7-day grace period on failed payments before cancellation.
Where are the VPN nodes?
Currently: Frankfurt (Germany), Helsinki (Finland), Singapore, and US Central. Additional regions are added as the network grows. The WraithVPN app shows real-time latency so you always connect to the fastest node for your location.