What WireGuard does

WireGuard is an open-source VPN protocol and implementation project founded in 2015 by security researcher Jason A. Donenfeld. The project provides a cross-platform VPN tunneling solution that uses state-of-the-art cryptography — including the ChaCha20-Poly1305 symmetric cipher, Curve25519 for ECDH key exchange, BLAKE2s for hashing, SipHash24 for hashtable keys, HKDF for key derivation, and the Noise_IK handshake framework — and has been formally verified using Tamarin, CryptoVerif, and ProVerif. WireGuard runs primarily as a Linux kernel module and offers userspace implementations in Go (wireguard-go) and Rust (wireguard-rs), with native client applications on Windows (including the WireGuardNT kernel-mode implementation and Wintun driver), macOS, iOS, Android, FreeBSD, and OpenBSD. Its distinguishing technical concepts include Cryptokey Routing (associating public keys with allowed tunnel IP addresses, functioning as both a routing table and access control list) and built-in IP roaming that updates endpoints without additional round trips.

WireGuard's core product is the protocol itself plus platform clients, supplemented by developer tooling such as the wg(8) and wg-quick(8) CLI utilities, wgctrl-go for programmatic control in Go, embeddable libraries for Windows, macOS/iOS, Android, and Linux, and supporting infrastructure including the wg-dynamic configuration daemon and kbench9000 benchmarking module. The project is horizontally segmented across IT administrators and network engineers, organizations of all sizes requiring secure site-to-site or remote-access VPN, and security-conscious individual users, with use cases spanning embedded devices, smartphones, servers, cloud infrastructure, and container networking.

WireGuard operates without a traditional corporate structure. It is an open-source project maintained primarily by Jason A. Donenfeld, who holds the trademarks and is the sole listed founder/lead developer (1–10 personnel total). It is released under GPLv2 for kernel components and MIT/BSD/Apache 2.0/GPL for other projects, and generates no commercial revenue. Operations are funded by tiered corporate donations (platinum, gold, silver) from sponsors including Jump Trading, Chaincode Labs, OpenSats, Fly.io, and Vultr, plus individual contributions via GitHub Sponsors, Patreon, Liberapay, Stripe, PayPal, and Bitcoin. Distribution is entirely self-serve through Linux distribution package managers, the Apple App Store, Google Play, Windows MSI/installer packages, and direct source compilation.

Name

WireGuard

Legal name

WireGuard (Open Source Project - Jason A. Donenfeld)

Website

https://wireguard.com

Company type

Private

Founded year

2015

Operating status

Operating

Headcount range

1–10 employees

Short description

WireGuard is a free, open-source VPN protocol project founded in 2015 by Jason A. Donenfeld, offering cross-platform secure tunneling software (Linux kernel, Windows, macOS, iOS, Android, BSD) using state-of-the-art cryptography, serving IT administrators, enterprises, embedded device makers, and privacy-conscious consumers with no commercial revenue model.

Ownership category

akta.pro rank

Product category

Network Security Software

SIC

Computer Communications Equipment (3576)

akta.pro primary industry

Packet Brokers & Network Traffic Visibility (TAPs, NPBs) (HDADABAM)

akta.pro secondary industry

Secure/Encrypted Messaging (BPAMACAG)

Keywords

• VPN tunneling protocol
• Open-source VPN software
• Encrypted network tunnels
• Kernel-level cryptography
• Secure VPN implementation

Headquarters

HQ city

Jefferson

HQ country

United States

HQ region

North America

Markets served

GTM type

B2B and B2C

Offering type

Software

Cost components

Personnel, Technology or R&D, Infrastructure, Operations, Others

Distribution channels6 records

Marketing channels5 records

Core offering

WireGuard is an open-source VPN protocol and cross-platform software implementation that creates fast, modern, and secure encrypted network tunnels over UDP. It uses state-of-the-art cryptography (ChaCha20-Poly1305, Curve25519, Noise framework) and is distributed as a Linux kernel module with userspace implementations in Go and Rust, plus dedicated client applications for Windows, macOS, iOS, Android, FreeBSD, and OpenBSD.

Product overview

WireGuard is a unified open-source VPN protocol and implementation offering a comprehensive product portfolio across multiple platforms. The core consists of the WireGuard protocol utilizing state-of-the-art cryptography (ChaCha20-Poly1305, Curve25519, BLAKE2s, HKDF) and the Noise protocol framework. Platform-specific clients include WireGuard for Android, macOS/iOS, Windows, FreeBSD, and OpenBSD. Cross-platform userspace implementations exist in Go (wireguard-go) and Rust (wireguard-rs). Developer tools include the wg & wg-quick CLI tools, wgctrl-go library for Go applications, and platform-specific embeddable libraries for Windows (DLL service), macOS/iOS (WireGuardKit/Swift), Android (Maven artifact), and Linux (C library). Supporting infrastructure includes Wintun (Windows TUN driver), wireguard-tamarin (formal verification), zinc (kernel cryptography library), wg-dynamic (dynamic configuration), and kbench9000 (performance benchmarking). Formal verification has been conducted using Tamarin, CryptoVerif, and ProVerif, with verified Curve25519 implementations from HACL* and Fiat-Crypto.

Differentiator

Problem solved

Functional benefit

Products and services

• WireGuard Protocol & Implementation The core open-source, cross-platform VPN protocol utilizing state-of-the-art cryptography (ChaCha20-Poly1305, Curve25519, Noise framework), designed to be simpler, faster, and more secure than IPsec and OpenVPN. Runs in-kernel on Linux and supports userspace implementations. Targeted at developers, IT administrators, and network engineers who need to configure and deploy secure VPN solutions.
• WireGuard for Android

Quantifiable outcome

• WireGuard consistently outperforms OpenVPN significantly and edges out IPsec due to its multi-threading capabilities

Segments3 records

Ideal customer profiles3 records

Technology focussed Yes

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Integration3 records

Feature8 records

Recent moves6 records

Expansion highlights5 records

Direct peers

• Tailscale: Commercial overlay-network product built directly on top of the WireGuard protocol, offering zero-config mesh VPN for developers and enterprises. Operates in the same secure-tunneling category but packages WireGuard into a managed SaaS with identity, policy, and orchestration layers.
• OpenVPN: Open-source VPN protocol/technology that is the most direct functional competitor to WireGuard. Both target the same IT/network administrator use case of secure tunneling, with OpenVPN holding the legacy incumbent position that WireGuard's simpler design and better performance are actively displacing.
• strongSwan: Mature open-source IPsec VPN implementation widely used on Linux and embedded systems. Directly competes with WireGuard for VPN protocol deployments, especially in enterprise and industrial settings where IPsec compliance and interoperability are still required.

Emerging players

• Mullvad VPN: Privacy-focused commercial VPN service that has been an early and active supporter and integrator of the WireGuard protocol. Comparable as a privacy-first VPN product for individual users, with a smaller footprint than NordVPN or ExpressVPN but strong brand alignment with WireGuard's open-source ethos.
• Proton VPN: Privacy-focused VPN service from Proton that supports the WireGuard protocol alongside OpenVPN and IKEv2. Targets security-conscious individual and enterprise users with a comparable feature set (encrypted tunneling, no-logs policy) but as a fully managed, paid service.
• ZeroTier: Software-defined overlay network providing peer-to-peer VPN-like connectivity for developers and IoT/edge use cases. Comparable to WireGuard in the secure overlay networking category, but uses its own custom protocol rather than WireGuard's cryptographic construction.
• Algo VPN: Open-source VPN deployment toolkit from Trail of Bits that can deploy WireGuard or IPsec servers. Comparable as an open-source VPN tooling project aimed at self-hosters and security-conscious users, with a much narrower scope than WireGuard itself.

Broad incumbents

• NordVPN: Large consumer/commercial VPN service with proprietary protocol (NordLynx) built on WireGuard. Comparable as a VPN offering to end users seeking privacy and secure tunneling, but monetized as a paid subscription service at scale rather than an open-source project.
• Cisco Secure Client (formerly AnyConnect): Enterprise-grade VPN client from Cisco used by large organizations for remote-access VPN. Operates in the same secure-remote-access category as WireGuard deployments, but as part of Cisco's broader networking/security portfolio and with a much heavier commercial footprint.
• Cloudflare WARP: Consumer and enterprise VPN/security service from Cloudflare that is built on the WireGuard protocol. Comparable as a VPN product targeting privacy-conscious and remote-work users, but bundled into a much broader networking and security platform rather than a standalone tunneling solution.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat5 records

Key risks5 records

Key highlights7 records

Customer concentration

• GitHubgithub.com/WireGuard
• Xx.com/WireGuardVPN
• Facebookfacebook.com/wireguard
• LinkedInlinkedin.com/company/wireguard

Revenue estimate

Valuation estimate

Number of profiles

Profiles1 record

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about WireGuard