Live from vpn.pwnsy.com

VPN Tools: test, build, audit

Thirteen browser tools to test, build and audit a VPN connection.

Checking this connection

Exit address, WebRTC and both address families. A few seconds.

All 13 VPN tools

13 tools

Start here

Measure this connection.

Leak Test WebRTC, DNS, IPv6, clock. Exit IP Intel ASN, abuse contact, IPv4 and IPv6. Browser Fingerprint Signals a tunnel cannot hide. Tunnel Speed Latency, bufferbloat, throughput. VPN Chooser Live answer from your threat model.

Build and configure

Generate and tune configs.

WireGuard Config Server and peer files, keys made in-browser. AllowedIPs Calculator Split tunnelling, returned as minimal CIDRs. MTU and MSS Per-packet overhead, MTU to set, MSS clamp. Protocol Comparator Six protocols: ciphers, roaming, visibility.

Intelligence

Know what is happening out there.

Censorship Radar Providers ranked on OONI measurements. Edge CVE Watch Exploited appliance flaws, ordered by patch priority. Config Auditor Paste wg0.conf or client.ovpn and get it graded. Endpoint Prober Real handshakes at a host you name.

Find a tool Press / to search, Enter opens the first match, Esc clears.

This connectionchecking

WebRTC leakchecking
Clock vs exitchecking
IPv4 and IPv6 exitschecking

Run the full leak test

Live readings and FAQ

Background readingWhat a VPN does Encrypted DNS Public Wi-Fi

Your exit address asking the API

Quick leak check testing this browser

Your clock vs your exit comparing

IPv4 and IPv6 exits asking each family

Newest exploited flaw CISA KEV, remote access gear

Your exit address goes to vpn.pwnsy.com for lookup. Other checks run in this tab.

How the quick checks work

Four checks run at once: your exit address and its network, WebRTC candidates against that exit, device clock against exit timezone, and IPv4 against IPv6 exits. The fifth tile shows the newest VPN entry in CISA KEV. The full leak test adds DNS and locale.

Green passed, red is a leak shape, amber is a clock mismatch, grey could not run. No page can confirm a no-logs claim.

Where the data comes from

Counts and dates come from the source named; thresholds and grades are ours.

OONIooni.org · volunteer probes test reachability inside each country, published openly. Drives the censorship radar.

CISA KEVKnown Exploited Vulnerabilities · listed once exploitation in the wild is confirmed. VPN and remote-access products only.

FIRST EPSSfirst.org/epss · daily probability of exploitation within thirty days. Feeds the patch priority and the 30-day trend in Edge CVE Watch.

Team Cymru IP-to-ASNIP to ASN mapping · address to prefix, ASN and owning network, from routing data.

ipwho.isipwho.is · geolocation, timezone, hosting class. City-level estimate, labelled that way.

Tor Project exit listmetrics.torproject.org · published Tor exit addresses, so an exit is identified as one.

Our own probesWireGuard, OpenVPN and IKEv2 handshakes and a DNS listener on dnsleak.pwnsy.com, on our own infrastructure. Prober, leak test and speed test measure live, no third party.

VPN tools FAQ

Are these VPN tools free, and do I need to install anything?

Free, in your browser, nothing to install. Some tools call vpn.pwnsy.com; WireGuard keys are made in your browser.

What does the quick leak check on this page test?

It compares each public WebRTC address your browser exposes with your exit. One in a different network is a leak. The full leak test adds DNS, IPv6, timezone and locale.

Why does the clock tile say Mismatch?

Your device timezone differs from where your exit is placed. Sites can read it, so it hints at a VPN even with no leak.

Can these tools prove a VPN keeps no logs?

No. They measure what is observable: leaks, timing, overhead, published flaws and what a server answers.

Which tool should I use if I run a company VPN appliance?

Edge CVE Watch for exploited flaws by patch priority, then the Config Auditor and the Endpoint Prober.

Measurement data from OONI, CISA KEV, FIRST EPSS, Team Cymru, ipwho.is and the Tor Project exit list. Active probes run from our own infrastructure. API at vpn.pwnsy.com.