Made for whitelists
VLESS + Reality on port 443 blends in with ordinary, allowed HTTPS traffic.
Built for whitelisted mobile networks
A stealthy VPN that keeps you connected when networks switch to whitelists — while your bank, government and shopping apps stay direct and fast.
Why Sombrero
Some mobile networks only let traffic through to an approved list of sites, and ordinary VPNs simply get cut off. Sombrero wraps your connection in VLESS + Reality, so to the network it looks like an everyday visit to an allowed website — on port 443, like any HTTPS page.
Local services are routed directly, outside the tunnel. Your bank, government portals and marketplaces keep working as usual — no switching the VPN on and off.
What you get
VLESS + Reality on port 443 blends in with ordinary, allowed HTTPS traffic.
Local services go direct, everything else goes through the tunnel. No switching back and forth.
A single subscription link sets up your phone, laptop and tablet in one tap.
We fine-tune servers and routes; your app picks up the changes automatically.
Servers in multiple countries, all bundled into the same subscription.
Check your devices and traffic, and grab your QR code whenever you need it.
How it works
Tell us how many devices you'd like to connect. We'll reply with plans, terms and your personal link.
It's free on iPhone, Android and desktop. Prefer Streisand or Hiddify? Those work too.
Servers, routing and settings import in one tap. Hit Connect — that's it.
Pricing
Every setup is a little different, so we keep it personal: drop us a line and we'll send you our current plans and terms.
FAQ
Some mobile networks can switch to a mode where only a short list of approved sites works. Sombrero disguises your connection as a visit to an allowed site, so it keeps working when typical VPNs can't even connect.
Usually not. Most local services — banking, government portals, marketplaces — are routed directly, outside the tunnel, so they work as if the VPN were off.
We recommend Happ — it's free on iPhone, Android and desktop. Streisand and Hiddify (sing-box) are supported too.
Up to five devices by default. Need more? Just mention it in your email.
Email us. When we adjust servers or routes, your app picks up the update automatically — no reinstalling, no new links.
Plans, terms and payment details come by email. No accounts, no forms.