Portmaster and SPN
Portmaster combines a local application firewall, network monitor, privacy filter, and secure DNS controls. Its paid SPN adds onion-encrypted multi-hop routing for Windows and Linux traffic.
Portmaster SPN official product pages preserves the current architecture, price, platform, and ownership claims.
The endpoint product is the differentiator
Portmaster sees connections at the operating-system network layer. It can attribute traffic to applications, block unwanted destinations, apply per-application rules, and keep selected connections outside SPN.
SPN calculates routes per connection and can use different exit IP addresses simultaneously. This avoids giving every application and destination one shared VPN exit identity. It also permits an exit near the destination, which can reduce unnecessary geographic detours.
That design is useful for device visibility and compartmentalization. It can also create compatibility problems when a service expects several related connections to arrive from one stable address.
SPN is onion routing, not Nym’s mixnet
SPN applies layered encryption across multiple relays, but its public architecture does not describe the fixed-size packets, random delay, packet mixing, and cover traffic that define Nym VPN anonymous mode. The systems therefore should not receive the same traffic-analysis-resistance claim merely because both use several hops.
SPN’s clearer value is between a plain VPN and system-wide Tor: whole-device routing, per-connection paths, application-aware policy, and a local firewall in one open-source client. It still does not prevent browser fingerprinting, logged-in services, endpoint compromise, or correlation by a sufficiently capable observer.
Ownership and account model
Portmaster and SPN began at the Austrian company Safing and are now developed and operated by IVPN. That continuity may strengthen operational credibility, but the SPN subscription still uses an account relationship. Its public material does not describe an entitlement separation equivalent to Nym’s zero-knowledge credentials or IVPN Unlinked Access.
Current support is limited to Windows and Linux. At 8 euro per month or 80 euro per year, Portmaster Pro sells both the network and the endpoint control plane. The free Portmaster remains independently useful without SPN.
Venture lesson
Portmaster is the stronger inspiration for a product that makes privacy controls visible and actionable. The commercially useful unit is not only a relay subscription; it is a local policy engine that shows which application connected where, blocks predictable leakage, and lets the customer route exceptions deliberately.
That supports Privacy claim assurance and managed deployment more directly than launching another network. The venture could test demand through configuration, policy packs, reports, and support around an existing client before considering relay infrastructure.