Unlock the power of
WireSock Secure Connect
Your secure gateway to seamless VPN connectivity
* License

WireSock Secure Connect is free for personal (non-commercial), or educational (including non-profit organization) use. For commercial use, please visit the Licensing page or contact us for licensing options.

What is WireSock Secure Connect?
Enhanced WireGuard for Windows
WireSock Secure Connect is a sophisticated WireGuard VPN client for Windows—available as both a command-line tool and a UI application—offering advanced capabilities not found in the official WireGuard client. It facilitates selective application tunneling and the exclusion of specific IP addresses. Designed for simplicity and ease of use, WireSock Secure Connect is a lightweight, transparent VPN solution that is free*.
Superior Performance and Customizability
Built on the solid foundations of Windows Packet Filter and BoringTun, WireSock Secure Connect excels in performance, security, and scalability, catering to both regular users and demanding professionals.
Principal Features:
1
Reducing VPN Detectability:
  • New
    Sending Junk Packets: Obfuscate data patterns to thwart deep packet inspection and minimize DPI flags.
  • New
    Support Amnezia: Implemented methods used in AmneziaWG to further enhance stealth connectivity.
  • SOCKS5 Proxy Handshake: Route initial handshake traffic through a SOCKS5 proxy to mask VPN connections.
2
User-Level Tunnel Activation:
Launch and manage tunnels with only user privileges (in adapterless mode), a convenience not found in standard WireGuard for Windows.
3
Transparent Operation:
Operate in a virtual network adapter mode, or choose a default mode that preserves your current network settings for an uninterrupted VPN experience.
4
Selective Application Tunneling:
Route only the apps you choose through the VPN with Tunneled applications and Non-tunneled applications , giving you precise control over your network traffic.
5
Intelligent IP Routing:
Fine-tune your setup by excluding particular subnets from Tunneled networks/addresses with Non-tunneled networks/addresses ensuring unwanted routes are kept out of the VPN tunnel.
6
High-Speed Connectivity:
Achieve outstanding throughput that outperforms many other user-space VPNs, matching kernel-mode speeds for streaming, gaming, and video conferencing.
See the comparison charts below
7
Ultra-Lightweight:

For command-line installations, WireSock Secure Connect requires just 1.5 MB of storage, with a minimal RAM footprint under 10 MB.

Even with the built-in UI client, it remains compact at 7.2 MB, ensuring your system stays fast and responsive.

8
Windows 10 Mobile Hotspot Compatibility:
Extend secure connectivity to devices connected via Windows 10 Mobile Hotspot—a unique feature not offered by the official WireGuard for Windows.
9
Backup Tunnel Configuration:
Stay online without interruption by switching to a secondary WireGuard setup if your primary tunnel drops.
Coming soon...
Automatic Kill-Switch

Instantly blocks all network traffic if the VPN tunnel is down or the client stops unexpectedly — preventing accidental data leaks.

Per-App DSCP Marking

Tags traffic with differentiated services (DSCP) values on a per-application basis, letting you prioritize latency-sensitive apps (e.g., VoIP, gaming) over bulk transfers.

Domain-Based Routing

Route traffic to specific domains through the VPN matched via DNS, while leaving the rest of your connections on the regular network. Perfect for selectively tunneling services like banking or corporate portals.

DNS Search Suffixes

Lets you define DNS search suffixes (just like the official WireGuard client), so internal hostnames such as printer.office resolve automatically when you’re connected to the VPN.

Eager to see these features sooner?

Let us know your feedback helps us prioritize development! Contact us to influence the roadmap or accelerate delivery.

Performance
Wireguard Software Upload and Download Speed Comparison:

The following is a comprehensive comparison of throughput (upload/download) test results conducted with some of the most prominent Wireguard client implementations for Windows. These include the official WireguardNT and Wireguard-Go implementations, TunSafe, and the WireSock Secure Connect operating in transparent mode.

The testing platform was an Intel® NUC DC3217IYE (Core i3-3217u), a machine that is over ten years old, running Windows 10 x64 on the client side. For each test, iperf3 was configured to utilize 4 TCP sessions, corresponding to each virtual CPU. The most notable results were derived from a series of 10 consecutive tests, which are depicted in the initial chart.

The subsequent chart offers a comparative analysis of the performance between WireSock Secure Connect (in both Transparent and Virtual Adapter Modes) version 1.2.37 and WireguardNT version 0.5.3, operating over a 10Gbps network connection. For this evaluation, the client-side setup incorporated the Intel® Xeon® E-2378G Processor, complemented by the Broadcom P210tep NetXtreme-E Dual-port 10GBASE-T Ethernet PCIe Adapter.

We conducted each test with iperf3, configured for 8 TCP sessions to produce the necessary traffic volume. The chart displays the best outcomes derived from a series of 10 consecutive tests.

As illustrated in the above charts, the WireSock Secure Connect showcases notably higher download speeds compared to the official kernel mode implementation of Wireguard for Windows, and undoubtedly surpasses all other tested implementations.