pwnsy

VPN Tools

Thirteen screens that measure your tunnel. live from vpn.pwnsy.com

New here? Answer six questions for a recommendation, or test the connection you are on.

Your exit address
asking the API
Quick leak check
testing this browser
Your clock vs your exit
comparing
Newest exploited flaw
CISA KEV, remote access gear

Start here

Check what your connection is actually doing.

Leak Test

WebRTC, DNS, IPv6 and clock leaks.

Exit IP Intel

What a site learns from your address.

Browser Fingerprint

What a tunnel does not change about you.

Tunnel Speed

Latency, jitter and throughput to our endpoint.

VPN Chooser

Six questions, one recommendation, its limits.

Build and configure

Set one up properly.

WireGuard Config

Server and peer files, keys made in-browser.

AllowedIPs Calculator

Split tunnelling, returned as minimal CIDRs.

MTU and MSS

Per-packet overhead, MTU to set, MSS clamp.

Protocol Comparator

Six protocols: ciphers, roaming, visibility.

Intelligence

Know what is happening out there.

Censorship Radar

Providers ranked on OONI measurements.

Edge CVE Watch

Exploited appliance flaws, ordered by EPSS.

Config Auditor

Paste wg0.conf or client.ovpn and get it graded.

Endpoint Prober

Real handshakes at a host you name.

Where the data comes from

Counts and dates come from the source named; thresholds, grades and wording are ours, with the rule shown on each page.

OONI ooni.org · volunteer probes test reachability inside each country, published openly. Drives the censorship radar.
CISA KEV Known Exploited Vulnerabilities · listed once exploitation in the wild is confirmed. VPN and remote-access products only.
FIRST EPSS first.org/epss · daily probability of exploitation within thirty days. Orders the CVE list with the KEV date.
Team Cymru IP-to-ASN IP to ASN mapping · address to prefix, ASN and owning network, from routing data.
ipwho.is ipwho.is · geolocation, timezone, hosting class. City-level estimate, labelled that way.
Tor Project exit list metrics.torproject.org · published Tor exit addresses, so an exit is identified as one.
Our own probes WireGuard, OpenVPN and IKEv2 handshakes and a DNS listener on dnsleak.pwnsy.com, on our own infrastructure. Prober, leak test and speed test measure live, no third party.
What these tools cannot tell you

Every answer is computed or measured: names resolved through a listener we control, real OONI measurements from inside the country, keys generated in your browser and never sent. Where a check cannot prove something the page says so, a small sample as insufficient, a filtered probe as inconclusive, and a score always shows its count.

No page can confirm a no-logs claim, a safe jurisdiction, or a tunnel unbreakable by a state adversary. Those are not observable from outside. We observe reachability, leakage, timing, packet overhead, published vulnerabilities and what a host answers.

Read the guide

What a VPN actually does VPNs tested and ranked Network security fundamentals