VIGIL MESH

Documentation

Free VPN, without the catch: your own machines, encrypted

Searching for a "free VPN" often means looking for two very different things without realizing it: a proxy to hide your IP address while browsing, or a private network to reach your own machines remotely. VIGIL-MESH is the second: an encrypted mesh VPN between your devices, whose free plan relies neither on advertising nor on your data — direct peer-to-peer traffic structurally costs the service nothing, so it is unlimited.

What "free VPN" usually means

Most services that present themselves as free VPNs are anonymization services: all your Internet traffic goes through their servers, which send it back out under another IP address. Yet carrying the traffic of millions of users is expensive — servers, bandwidth, operations. A service that charges nothing has to fund itself some other way.

Without accusing anyone by name, the business models seen in this sector are well known: advertising inserted into the experience, exploitation or resale of browsing data, throttled bandwidth to push users toward a paid tier, or reselling the users' own connections. When the product is a pipe your entire browsing goes through, "free" rarely means the same thing as it does on an honest price list.

Another kind of VPN: a private network between your machines

VIGIL-MESH goes back to the original meaning of VPN: a virtual private network. It links your machines — the PC at home, the NAS, the cameras, the laptop on the road — into a closed, encrypted network, as if they were plugged into the same switch. Traffic goes directly from one machine to another, peer to peer, with no detour through a central server.

Encrypted end to end

Every session is an end-to-end QUIC/TLS 1.3 connection: only the two machines talking to each other hold the keys.

Structurally blind relays

When the direct path is not yet established, traffic goes through a relay that does not hold the keys and never sees the content — it can neither read it nor resell it.

Zero inbound ports

No machine opens an inbound port: connections are always established outward. Nothing to expose on the Internet, nothing to forward on the router.

A real local network

Encrypted IP broadcast and multicast cross the network: devices discover one another as if on a single local segment.

Why this free plan hides nothing

The difference comes from the architecture. In an anonymization VPN, every byte transits through the service's servers: each free user costs bandwidth. In a mesh VPN, direct peer-to-peer traffic goes from one of your machines to another without ever touching VIGIL-MESH's infrastructure — so it costs the service nothing. Only relayed traffic, used when the direct path is not available, has a real cost.

The free plan follows from that reality, with no tricks: up to 5 devices, unlimited direct traffic, and 30 GB of relayed traffic included per device per month (€1 per GB beyond that). The service’s business model is the Pro subscription, at €1.99 per month — not advertising, not your data.

What you actually do with the free plan

A free VPN for remote access to your own PC — that is the typical use case. Clients exist for Windows, Linux, Android, Jetson — and even the browser, thanks to a WASM core that opens an SSH terminal or an RDP desktop in a plain tab.

  • Access your PC remotely — remote desktop, files, terminal, from anywhere, without exposing anything on the Internet.
  • Reach your cameras and NAS — as if you were at home, through an encrypted tunnel instead of an open port on the router.
  • Play LAN games remotely — local broadcast crosses the mesh, and LAN game lobbies are discovered as if on a single segment.
  • SSH and RDP from the browser — a tab is enough, even on a machine with nothing installed.

Classic free VPN vs free mesh VPN

Classic free VPN (anonymization)Free mesh VPN (VIGIL-MESH)
What it is forHiding your public IP while browsingLinking your own machines together
Where traffic goesThrough the service's serversDirectly, peer to peer (blind relay as fallback)
Who can read the contentThe service, technically, on its own serverNo one but your machines: end-to-end TLS 1.3
How the free tier is fundedAdvertising, data exploitation, throttling — depending on the serviceDirect traffic costs the service nothing; the Pro subscription (€1.99/month) funds the rest
Limits of the free tierThrottled speed, waiting queues, capped data — depending on the serviceUnlimited direct traffic; 30 GB relayed/device/month, 5 devices

Frequently asked questions

Is the free plan time-limited?
No. It is neither a trial nor a promotion: direct peer-to-peer traffic structurally costs the service nothing, so the free plan is sustainable by construction. Only relayed traffic, which has a real cost, is subject to a monthly quota.
Is my data resold?
No. VIGIL-MESH's business model is the Pro subscription (€1.99 per month), not your data. And the architecture guarantees it beyond the promise: sessions are encrypted end to end with QUIC/TLS 1.3, and relays are structurally blind — they do not hold the keys and never see the content.
How many devices and how much traffic does the free plan include?
Up to 5 devices, with unlimited direct peer-to-peer traffic and 30 GB of relayed traffic included per device per month.
What happens if I exceed the relayed traffic quota?
Beyond the 30 GB of relayed traffic included per device per month, additional relayed traffic is billed at €1 per GB. Direct traffic remains unlimited and free.
How is this different from a free VPN for browsing?
A free VPN "for browsing" is an anonymization proxy: it hides your public IP by routing your browsing through its servers. VIGIL-MESH does something else: it creates an encrypted private network between your own machines so you can reach them remotely. It does not hide your public IP — if that is your need, this is not the product.
Read nextVPNs explained from scratch