Update - January 6, 2026

Name: OrbVPN
Rating: 4.8 (10000 reviews)

Threat Intelligence API: Full-featured threat intelligence platform with indicator storage, analysis, and correlation
Intelligence Connectors: Integrated feeds from MalwareBazaar, FeodoTracker, SSLBlacklist, AbuseIPDB, GreyNoise, OpenPhish, CISA KEV, ThreatFox, Google Safe Browsing, and CitizenLab
Premium Connectors: Spamhaus, MISP feeds, and Shodan for advanced threat intelligence
Neo4j Graph Database: Relationship correlation between threat indicators with auto-relationship creation by shared tags
AI Scam Detection: AI-powered scam detection service with real-time analysis
Forensics Service: Digital forensics capabilities with API key validation
Webhook Management: Registration and delivery management for threat intelligence notifications
Azure Deployment: Container Apps CI/CD workflow with Redis TLS support

Desktop Security: Full scanning for macOS, Linux, and Windows persistence mechanisms
Quarantine Management: Isolated threat containment with management interface
Data Broker Removal: Automated opt-out requests for personal data from data brokers
Zero-Day Protection: Behavioral threat detection for unknown vulnerabilities
Intelligence Sources Management: YARA rules, webhooks, and intelligence source configuration screens
Duotone SVG Icons: Replaced Material Icons with custom duotone SVG icon system
iOS Liquid Glass UI: iOS 26-inspired glass design system throughout the app

VLESS IP Mode: iOS client support for raw IP packet tunneling
Bridge Mode Improvements: Enhanced VLESS and WireGuard multi-hop functionality
TUN IP Conflict Resolution: Fixed IP range conflicts for VLESS client management
Smart DNS Residential Proxy: Support for streaming services that block datacenter IPs
mDNS Pairing Server: Local device discovery and pairing for OrbMesh nodes

Bridge Mode Fix: Corrected operation order — bridge session registered before VPN connection for VLESS and OrbConnect protocols
VlessDirect Tunnel Manager: Direct IP packet tunneling for improved VLESS performance
Token Refresh Intervals: Optimized session management for restricted regions
Network Scanner: Port forwarding spotlight feature and sync endpoint improvements

Smart Connect API: Region-based VPN and mimicry protocol recommendations with telemetry reporting
Intelligence API: User connection analytics, protocol performance stats, and AI insights for countries and ISPs
Network Scanning: Full network scan management with device discovery and user associations
Bridge Selection: Deterministic ordering for consistent bridge server assignment
JWT Extension: Extended token expiration for improved user experience in restricted regions