Private connectivity for distributed teams — without WireGuard's footprint.
Devok runs your team on next-gen XTLS protocols (VLESS+Reality, Trojan, Shadowsocks-2022) so your traffic looks like normal HTTPS even in the strictest networks. Managed end-to-end. Billed per seat.
Trusted by remote-first teams operating in restricted regions.
Built on open protocols. Operated from the EU.
One control plane. Three obfuscated transports. Your team online.
We run the entire stack — control plane, edge nodes, certificate rotation, key revocation — so you ship a subscription URL and forget about it.
You order seats. Our control plane creates users, issues subscription URLs, and pins them to the nearest healthy edge.
Edge nodes serve traffic over VLESS+Reality, Trojan-TLS, or Shadowsocks-2022 — selected per-network, not per-user.
Add or revoke seats from the panel, rotate keys, audit usage. Outage on one transport? Clients fail over automatically.
Why Devok
Everything you'd build in-house if you had six weeks — already running.
Looks like HTTPS, not a VPN
Reality + TLS-in-TLS make your team's traffic indistinguishable from regular browser sessions. No WireGuard fingerprint.
Bring your own clients
Works with v2rayN, Hiddify, NekoBox, Streisand. One subscription URL per seat — installs in 30 seconds.
Managed nodes, global
EU, US, Asia, Middle East. We own the infra, you own the policy. SLA on the Business and Enterprise tiers.
Seat management that scales
Add/remove teammates, rotate keys, revoke devices from one panel. SCIM/SAML on Enterprise.
No client to maintain
Zero proprietary app to push to laptops. Saves you 4–6 weeks of rollout vs. building bespoke.
Deploy on your infra
On request, we install and operate the whole stack inside your own cloud. Quote based.
Protocols built for hostile networks
We don't try to make WireGuard work where it can't. We start from protocols designed for the problem.
Default. Borrows a real TLS handshake from a legitimate site — uncatchable by SNI fingerprinting.
Fallback. Pure TLS over 443. Looks identical to a normal HTTPS site.
Lightweight cipher option for mobile or constrained networks.
"We replaced a patchwork of consumer VPNs with one panel. The team stopped noticing the network — which is exactly what we wanted."
Built for teams, not solo users
Freelancers & contractors
Stable access to your tools and clients regardless of where you operate from.
SMBs & remote-first teams
Replace patchwork commercial VPNs with one managed plane. Per-seat billing, no contracts.
Enterprises in regulated regions
Deploy-on-your-infra option, SCIM, audit logs, SLA. Quote-based.
Pricing
Per seat, billed monthly. No setup fees on Starter & Business.
Starter
1 seat. Perfect for freelancers and solo operators.
- ✓1 seat
- ✓Global nodes
- ✓VLESS+Reality / Trojan / SS-2022
- ✓Email support
Business
PopularFrom 5 seats. Per-seat pricing, central admin.
- ✓5+ seats
- ✓Central admin panel
- ✓Squad/policy management
- ✓Priority support
- ✓99.9% SLA
Enterprise
From 20 seats. SCIM, SAML, audit logs, custom SLA.
- ✓20+ seats
- ✓SCIM / SAML
- ✓Dedicated nodes
- ✓Audit logs
- ✓Custom SLA
- ✓Named account engineer
Billing opens Monday. Reserve seats now — we'll invoice on activation.
Deploy-on-your-infra
Want the whole stack running inside your own cloud, on your own ASNs, with your own branding? We install, operate, and hand off. Setup from $2,500–$7,500 + ongoing support retainer.
Reserve your seats
We're activating billing on Monday. Tell us how many seats you need and we'll email you a payment link.
FAQ
How is this different from a regular VPN? +
Traditional VPNs (WireGuard, OpenVPN, IPsec) are detectable by deep packet inspection. Devok uses XTLS-family protocols that mimic ordinary HTTPS traffic and survive in networks where WireGuard is blocked outright.
Do I need to install a custom client? +
No. We hand you a subscription URL. Drop it into v2rayN (Windows), Hiddify (mobile + desktop), or NekoBox. 30-second install.
Do you log traffic? +
We do not inspect or store content. Connection metadata is retained only as required for operations and billing — see our Privacy policy.
Where are the nodes? +
EU primary, US, Asia, Middle East. We add regions as customer demand justifies. Enterprise can request dedicated nodes.
Can you deploy this inside our own cloud? +
Yes — that's the Deploy-on-your-infra offer. Quote based on scope, locations, and SLA.