Privacy router · on-device agent

Anti-tracking
that travels
with you.

Nomad hides your digital identity on a travel router — IMEI, IMSI, MAC, DNS and location. Everything runs on the device itself. No cloud. No account. Nothing leaves the router.

See Nomad Pro

Verified on GL.iNet Mudi 7

  • Runs on your router
  • Open and audited
  • No accounts
Your network
Internet
WireGuard · encryption
bank.com
api · 443
DNS :53
cdn · 443
mail.proton
sync · 443
Carrier / ISP sees
██████ ██ ███████
Your networkProtected
IMEI / IMSI
MAC
DNS
Location
IMSI-catcher
Home
Office
Transit
ZoneHome
ProfileOpen
auto-switching
Automation rules
protection triggers itself — hands-free
WHENUnknown Wi-FiTHENVPN+ and DNS-lock
WHENEnter “Office” zoneTHEN“Work” profile
WHENNetwork lossTHENAirplane-FSM
WHENIMSI-catcher nearbyTHENRaise defenses
Laptop
Phone
Tablet
Warsaw
Zurich
Stockholm
VPN+
Device identity
identifier masking
active
MAC address5A:1C:9E:B2:7F:E2random
Hostnametraveler-3f9arandom
DHCP client-IDid-7b2e4crandom
Wi-Fi SSIDNomad-2C7Frotation
IMEI35 762209 481037manual
Changing the IMEI is an experimental research feature: only when needed (e.g. SIM swap), at your own responsibility and in accordance with your country’s laws.
Your traffic, sites and DNS — inside an encrypted tunnel

What gives you away

Your router broadcasts who you are.

Every connection leaves persistent identifiers. They link you across networks, borders and carriers — even with a VPN switched on.

IMEI / IMSI

Modem and SIM serials tie the device to you on every cellular network. persistent

MAC address

The Wi-Fi hardware ID tracks you between access points and locations. unique

DNS leaks

Queries bypassing the tunnel show your provider every domain you open. exposed

Cellular location

Nearby towers (BTS) reveal your location down to a city block. geoposition

How Nomad protects

Privacy and anonymity —
at every layer.

Nomad closes each tracking vector with its own mechanism and rolls them into a single protection posture. Here’s how the identifiers above disappear.

Encrypts traffic

WireGuard and OpenVPN for speed, VLESS — invisible to DPI and nearly impossible to block. The exit IP rotates on schedule without dropping the LAN; Tor for full anonymity.

VPN rotationVLESS · anti-DPITor / Tor+

Hides identity

Randomizing MAC, hostname, DHCP client-ID and Wi-Fi SSID breaks recognition across networks. Cellular-identity control and an IMSI-catcher detector watch for fake towers and downgrade attacks.

MAC / hostname / SSIDIMSI detectorSIM control

Seals leaks

DNS-lock blocks queries past the tunnel; kill-switch and port-lock stop traffic from leaking. Privacy check rolls it all into one score and fixes risks in a single tap.

DNS-lockKill-switchPrivacy score
Unique

Cellfence — trusted geo-zones

Zones built from the cell towers around you. When you enter “Home”, “Office” or move into “Transit”, Nomad switches the protection profile by itself — with zero taps. Nothing else on a mobile router does this.

Unique

Automation rules

“If—then” by network, location or state: unknown Wi-Fi → VPN+ and DNS-lock; network loss → airplane-FSM; IMSI-catcher nearby → raise defenses. Protection triggers itself, so you never have to think about it.

How it works

One agent. Four surfaces.
None of them go to the cloud.

Nomad installs as a single package on the router and runs everything locally. No account, no external runtime — control it however suits you.

iOS / Android

Companion app

Pairs with the router over the local network. The full dashboard in your pocket — status, toggles, map.

browser

Web UI (LuCI)

A dense operator panel right on the router. Command palette, history, fine tuning.

screen

Device screen

The LCD shows the protection posture and Pro activation. Scan the QR straight off the screen.

terminal

SSH / TUI

Full control from the console: nomad vpn · zone · harden. Everything is scriptable.

Who Nomad is built for

When privacy isn’t
a convenience but a necessity.

Journalists & human-rights defenders

Source protection and safe movement where metadata can expose a person.

Security services & field operatives

Protected communications with no digital trail and no recognizable network identity.

Business travelers

Corporate traffic under VPN protection. Privacy on foreign and open hotel and airport networks.

Life under censorship

Access and anonymity despite blocks — VLESS and Tor get through where an ordinary VPN fails.

Verified on device

Works with
GL.iNet Mudi 7.

Nomad is verified on the GL.iNet GL-E5800 “Mudi 7” — a 5G travel router with its own LCD screen. The agent runs everything right on the device: app, Web UI and the router screen all show the same protection posture.

5G · dual-SIMLCD screenOpenWrt-compatible
Nomad on the GL-E5800 Mudi 7 screenNomad on the GL-E5800 “Mudi 7” screen
192.168.8.1/nomad
Nomad Web UI on the GL-E5800 Mudi 7
Web UI on the router
Nomad app on iOS

Companion app

Pairs with the router over the local network. The same protection posture as the Web UI and the device screen.

AppWeb UIDevice screen

Free vs Pro

Powerful baseline protection.
Seven higher-tier features in Pro.

The app itself is free forever. Nomad Pro unlocks seven advanced features — one-time, perpetual, bound to the router.

VPN+PRO

Multiple simultaneous tunnels, exit-IP rotation and per-client routing policies.

Tor+PRO

Separate Tor circuits per client, country selection and automatic rotation.

Cellfence zonesPRO

Geo-fences from cell towers: different protection postures at home, at work, on the road.

Automation rulesPRO

“If—then” based on network, location or time. Switch VPN, Tor and profiles automatically.

BTS geolocationPRO

Map of nearby cells, movement history and carrier lookup right on the device.

Interface lockdownPRO

LAN isolation and port-lock: full control over who reaches what.

Profiles+PRO

Custom protection postures beyond the 2 built-in ones — as many configs as any scenario needs.

All 7 features
Capability
Free
Nomad Pro
Base VPN (WireGuard / OpenVPN / VLESS)
IMEI rotation, DNS-lock, privacy check
Tor (LAN redirect) · 2 built-in profiles
VPN+ multi-tunnel · Tor+ per-client
Cellfence zones · rules · BTS geolocation
Interface lockdown · unlimited profiles

Nomad Neo VPN · coming soon

A private exit network, built in. Soon.

A separate product from Pro: a managed private exit network that integrates with the on-device VPN. Currently in closed beta — leave your email for early access.

Private exit networkVLESS · Vision · REALITYEarly access by invitation

Privacy model

We have nothing about you to leak.

Privacy isn’t a feature, it’s the architecture. For Pro we have no accounts and store no personal data at all.

The key is the account

No logins, no email for Pro. The license key is your access; recovery goes through the router’s hardware identity, not a password.

Hashes only, not data

The server stores pseudonyms: router_id and sn_hash. No raw serials, no personal data.

On-device and auditable

The agent runs solely on the router. Every action lands in a signed log on the device itself — verify anything.

Ready to drop off the radar?

Set up Nomad in one minute.

The free app installs with a single line. You unlock Pro whenever you want more.