App Lock
Face ID, Touch ID, Passcode, or 6-digit TOTP via authenticator app. Tunnel credentials stay protected on company devices — even if the device is left unattended.
MDM Support
Managed App Configuration for organizations. Push tunnels, enforce restriction keys, set jailbreak policies. App Lock disables automatically — MDM handles security.
Configuration Profiles
Deploy tunnels via .mobileconfig. Profile-installed tunnels appear read-only in the app — users see status, but they cannot tamper.
Keychain Storage
Private keys live in your device’s secure storage — the same place that guards Face ID and Touch ID data. Nothing sensitive sits in less-protected system files.
On-Demand Activation
Connect automatically by network type or Wi-Fi SSID. The tunnel connects before anyone has to think about it.
Custom Config Format
The .vylos format — a ZIP that keeps your original wireguard.conf untouched and stores Vylos-specific settings separately in an optional settings.conf, so the WireGuard configuration remains portable.
By the Numbers
3
Apple platforms
19
Languages supported
1
Purchase per device
0
Servers we touch
Deploy Tunnels with VPN Profiles
<!-- .mobileconfig VPN Payload -->
<dict>
<key>PayloadType</key>
<string>com.apple.vpn.managed</string>
<key>UserDefinedName</key>
<string>Corporate VPN</string>
<key>VPNType</key>
<string>VPN</string>
<key>VPNSubType</key>
<string>io.cbnventures.vylos</string>
<key>VPN</key>
<dict>
<key>AuthenticationMethod</key>
<string>Password</string>
<key>RemoteAddress</key>
<string>vpn.example.com:51820</string>
</dict>
<key>VendorConfig</key>
<dict>
<key>WgQuickConfig</key>
<string><!-- WireGuard configuration --></string>
</dict>
</dict>Push WireGuard tunnels to every device via standard .mobileconfig profiles. Managed tunnels appear read-only in the app — users see status, but IT controls the configuration.
Available for iOS, macOS, and visionOS
From the Blog
Product updates, VPN best practices, and managed deployment guides.
Reconnect Faster, Trust the Signals: Vylos 1.3.0
Vylos 1.3.0 adds one-tap reconnect from notifications, managed tunnel bandwidth charts, quieter alert throttling, and persistent app-lock rate limiting.
On-Demand Rules and Split DNS: Automatic VPN Without the Overhead
On-demand activation rules and split DNS in Vylos 1.2.0 connect tunnels automatically based on network type and route only selected DNS queries through the VPN.
Deploying VPN to Supervised Devices with MDM
Push managed WireGuard tunnels, restrict user access, and enforce jailbreak policies across supervised iOS devices with Vylos and Apple MDM.