ABOUT US

Private by design,
secure by default.

Colitu is a VPN service built for a private, secure internet connection. It is developed by COLITU LIMITED.

Our story

We turned complex technology into a single button.

We wanted something better for people who deal every day with untrustworthy VPN apps and unclear privacy practices. We took the strength of modern protocols and put it into an app that needs no setup and no thought.

Today Colitu runs on Windows, Android, Android TV and Linux (beta), and the iPhone and iPad app is in testing on TestFlight. The code of all our apps is public, and our support team helps in three languages.

What we believe in

Private by default

We don't record which sites you visit or what passes through the tunnel. The limited data we keep to run the service, and for how long, is set out in our privacy policy.

Privacy policy

Transparency

Our Windows, Android, iOS and Linux apps are open source. You can see what the app does by reading the code, without taking our word for it.

Why we're open source

Reliable connection

Colitu monitors connection quality: if a connection mode does not work, the app moves to the next one by itself.

Server network

Honest pricing

Our free plan needs no card: 1 GB every month on us. Before you pay, we show the full total including fees.

Pricing

Roadmap

What we've done, what we're working on and what's next. We don't give dates; when something ships, you'll see it here and in the release notes.

Done

21
  1. Split tunneling

    Choose which apps, sites and IP addresses stay outside the VPN, or which are the only ones that use it. On iOS you can choose sites and IP addresses only.

    WindowsAndroidLinuxiOS
  2. Persistent kill switch

    A separate service on Windows, rules that stay in place on Linux even if the app crashes, and a "Block internet without VPN" switch on iOS: traffic does not leak when the VPN drops.

    WindowsLinuxiOS
  3. Two-step verification

    Protect your account with an authenticator app. You turn it on on the website and get 10 recovery codes; the apps ask for the code at sign-in.

    WindowsAndroidLinuxiOSWeb
  4. Per-device connection credentials

    Separate connection credentials for each device, subscription link and manual configuration export; when you remove a device, it is cut off within about 15 seconds.

    WindowsAndroidLinuxiOS
  5. Multihop (double VPN)

    Your traffic enters at one server and leaves at another, so the exit server does not see your IP address. Works with VLESS only.

    WindowsAndroidLinuxiOS
  6. Rotating IP

    The exit server changes every 5, 10 or 30 minutes without disconnecting, and you can choose the countries. Works with VLESS only.

    WindowsAndroidLinuxiOS
  7. Manual configuration

    sing-box, Xray and Clash Meta configurations, share links and QR codes for routers and other apps. Each export counts as a separate device and can be revoked.

    Web
  8. Raspberry Pi and headless Linux

    A headless client (colitud) that needs no desktop: Colitu on a Raspberry Pi and on servers.

    LinuxRaspberry Pi
  9. Open-source iOS app

    The source code of the iPhone and iPad app is on GitHub under GPL-3.0; the app has no analytics, advertising or crash-reporting libraries.

    iOS
  10. Chrome and Firefox extension

    An open-source extension that protects the browser without installing an app and works with the same account, with WebRTC leak protection and site lists.

    ChromeFirefox
  11. Security whitepaper

    Architecture, threat model, logging policy and known limitations in one document: colitu.com/security.

    Web
  12. Linux app (beta)

    An open-source desktop app for Ubuntu, Debian, Fedora and other distributions, with .deb, .rpm and .tar.gz packages.

    Linux
  13. Live support and Colitu Bot

    Write to support from the apps and the site; Colitu Bot answers in seconds.

    WindowsAndroidWeb
  14. Help Centre

    Setup, connection and subscription guides in three languages at docs.colitu.com.

    Web
  15. Automatic, verified updates

    The apps find new versions themselves and install only a verified package.

    WindowsAndroidLinux
  16. Hysteria2 first, automatic protocol choice

    Hysteria2 is tried first; if it cannot connect, the app switches to the next protocol by itself.

    AndroidWindows
  17. New Windows design

    The Windows app now looks the same as on iPhone and Android.

    Windows
  18. Android TV and Google TV

    A TV interface for the remote, with payment by QR code on your phone.

    Android TV
  19. Open-source apps

    The source code of the Windows, Android and Linux apps is on GitHub under GPL-3.0.

    WindowsAndroidLinux
  20. System status page

    Live status of every service and server at status.colitu.com.

    Web
  21. A setting for regional direct routing

    A setting in every app to choose whether regional sites on the built-in list go outside the VPN.

    WindowsAndroidiOS

In progress

3
  1. iPhone and iPad app

    The iOS app is in testing on TestFlight and already works; we're preparing the App Store release.

    iOS
  2. Moving from the old Telegram bot

    We are moving the remaining time of customers on the old infrastructure to their Colitu accounts.

    Web
  3. Security hardening

    Improvements to the apps and the site from our internal security reviews.

    WindowsAndroidWeb

Next

2
  1. New server locations

    Low-latency, stable servers in more countries.

    Network
  2. Independent security audit

    An independent penetration test and security audit of our apps and infrastructure. Not done yet and not yet scheduled.

    WindowsAndroidLinuxiOSWeb

For detailed changes: Release notes · System status

Get in touch

Have a question, a suggestion or a partnership idea? Write to us, we read everything.

Who writes our articles?

The technical articles on the blog and the protocol pages are written by COLITU LIMITED, the company that develops Colitu. Every article shows when it was published and updated; if you spot a mistake, write to info@colitu.com.

Company details

Colitu is operated by COLITU LIMITED, a company registered in England and Wales.
Registered office: 128 City Road, London, United Kingdom, EC1V 2NX
Company number: 17520342

Our email addresses

  • Supportsupport@colitu.comAccount, connection, payment and refund questions.
  • General, press and partnershipsinfo@colitu.comPress questions, partnership offers and everything else.
  • Privacy and data requestsprivacy@colitu.comRequests to access, correct or delete your personal data.
  • Report a vulnerabilitysecurity@colitu.comReport vulnerabilities in our apps or infrastructure here before sharing them publicly; we reply within 3 working days. Disclosure policy
  • Abuse reportsabuse@colitu.comSpam, attacks or copyright notices coming from Colitu servers.