Applications › VPN & Privacy Tools

VPN & Privacy Tools

What 7 leading VPN & Privacy Tools apps are built on: the providers each one ships in its code or lists as an integration, grouped by layer and capability, and joined to the catalog.

7 reference apps 37 providers 3 observed in code 34 declared only 100.0% in the catalog 50.1 mean Kin Score 14 with a verified MCP server
How to read this. observed the integration ships in the app (SDK in a dependency file, source code, or an Android build analysis). declared the app names the integration itself (README, integrations page, store listing). Every row links the source it was read from. Providers not yet in the catalog are marked queued for profiling. Blueprint by API Evangelist, CC BY-NC-SA 4.0. Capabilities marked Turbo EA come from Turbo EA Capabilities by Vincent Verdet, CC BY 4.0 (notice); those marked API Evangelist extension are CC BY-NC-SA 4.0.

domain layer 6 capabilities
Tenant Identity Federation 9 providers · BC-4230.50 · Turbo EA

Tenant Identity Federation capability

ProviderEvidenceAppsKin ScoreAgent readinessMCP
Okta declared [1] [2] [3] Firezone, NetBird, Tailscale 80.2 exemplar 51.1 agent-ready verified
Microsoft Entra ID declared [1] [2] [3] Firezone, NetBird, Tailscale 60.0 strong 26.4 agent-aware none found
Authentik declared [1] NetBird 71.6 exemplar 33.2 agent-ready none found
Zitadel declared [1] NetBird 55.3 strong 20.9 agent-aware none found
Keycloak declared [1] NetBird 35.3 thin 17.6 agent-aware none found
JumpCloud declared [1] NetBird 32.3 thin 23.2 agent-aware verified
OneLogin declared [1] Tailscale 28.9 thin 24.7 agent-aware verified
Duo SSO declared [1] NetBird 28.7 thin 21.3 agent-aware none found
Pocket ID declared [1] NetBird 23.6 emerging 20.1 agent-aware none found
Observability Management 7 providers · BC-4220.20 · Turbo EA

Observability Management capability

ProviderEvidenceAppsKin ScoreAgent readinessMCP
Datadog declared [1] [2] NetBird, Tailscale 79.2 exemplar 49.6 agent-ready verified
Elasticsearch / Logstash declared [1] Tailscale 76.1 exemplar 28.6 agent-ready verified
Splunk (HEC) declared [1] Tailscale 64.9 strong 48.0 agent-ready none found
Amazon Data Firehose declared [1] NetBird 61.0 strong 25.3 agent-aware none found
Axiom declared [1] Tailscale 51.4 developing 34.7 agent-ready verified
Cribl declared [1] Tailscale 50.6 developing 20.6 agent-aware none found
Vector declared [1] Tailscale 24.3 emerging 25.5 agent-aware none found
End-User Computing Management 5 providers · BC-600.50.50 · Turbo EA
ProviderEvidenceAppsKin ScoreAgent readinessMCP
Microsoft Intune declared [1] [2] NetBird, Tailscale 32.6 thin 24.6 agent-aware none found
Iru (formerly Kandji) declared [1] Tailscale 63.8 strong 37.2 agent-ready unknown
FleetDM declared [1] NetBird 63.1 strong 26.9 agent-aware documented
Jamf Pro declared [1] Tailscale 58.4 strong 24.8 agent-aware none found
SimpleMDM declared [1] Tailscale 41.3 developing 23.7 agent-aware —
Storage Management 5 providers · BC-600.50.20 · Turbo EA
ProviderEvidenceAppsKin ScoreAgent readinessMCP
Amazon S3 declared [1] [2] NetBird, Tailscale 70.8 exemplar 23.3 agent-aware verified
Google Cloud Storage declared [1] Tailscale 65.1 strong 33.3 agent-ready verified
Azure Blob Storage declared [1] Tailscale 55.5 strong 26.9 agent-aware verified
Wasabi declared [1] Tailscale 24.0 emerging 3.1 human-only none found
Storj declared [1] Tailscale 6.5 minimal 0.0 human-only none found
Threat Detection & Response Management 5 providers · BC-620.30 · Turbo EA

Threat Detection & Response Management capability

ProviderEvidenceAppsKin ScoreAgent readinessMCP
DataSet by SentinelOne declared [1] [2] NetBird, Tailscale 22.4 emerging 2.5 human-only verified
CrowdStrike Falcon declared [1] NetBird 67.2 exemplar 35.1 agent-ready verified
Huntress declared [1] NetBird 62.1 strong 56.5 agent-ready none found
Panther declared [1] Tailscale 54.6 strong 34.5 agent-ready verified
Wazuh declared [1] NetBird 16.7 emerging 2.9 human-only none found
Mesh VPN & Remote Network Access 1 providers · AE-933 · API Evangelist extension
ProviderEvidenceAppsKin ScoreAgent readinessMCP
Tailscale DERP relay map observed [1] Headscale 40.5 developing 21.5 agent-aware none found

common layer 4 capabilities
Social & Federated Login 3 providers · AE-160.10.30 · API Evangelist extension
ProviderEvidenceAppsKin ScoreAgent readinessMCP
Google / Google Workspace sign-in declared [1] [2] [3] Firezone, NetBird, Tailscale 36.8 thin 19.6 agent-aware none found
GitHub sign-in declared [1] Tailscale 81.8 exemplar 63.4 agent-ready verified
Sign in with Apple declared [1] Tailscale 55.2 strong 31.9 agent-ready none found
In-App Purchases & App Store Billing 1 providers · AE-904 · API Evangelist extension

In-App Purchases & App Store Billing capability

ProviderEvidenceAppsKin ScoreAgent readinessMCP
Google Play Billing observed [1] Mullvad VPN 31.6 thin 24.6 agent-aware none found
Mobile Attribution & Deep Linking 1 providers · AE-902 · API Evangelist extension

Mobile Attribution & Deep Linking capability

ProviderEvidenceAppsKin ScoreAgent readinessMCP
Google Play Install Referrer observed [1] Proton VPN 31.6 thin 24.6 agent-aware none found
Observability Management 1 providers · BC-4220.20 · Turbo EA

Observability Management capability

ProviderEvidenceAppsKin ScoreAgent readinessMCP
Sentry observed [1] Proton VPN 80.6 exemplar 50.2 agent-ready verified

Reference apps

Tailscale commercial

https://tailscale.com/

0 observed · 23 declared
  • declared lists Amazon S3 as an integration source
  • declared lists Axiom as an integration source
  • declared lists Azure Blob Storage as an integration source
  • declared lists Cribl as an integration source
  • declared lists Datadog as an integration source
  • declared lists DataSet by SentinelOne as an integration source
  • declared lists Elasticsearch / Logstash as an integration source
  • declared lists GitHub sign-in as an integration source
  • declared lists Google / Google Workspace sign-in as an integration source
  • declared lists Google Cloud Storage as an integration source
  • declared lists Iru (formerly Kandji) as an integration source
  • declared lists Jamf Pro as an integration source
  • declared lists Microsoft Entra ID as an integration source
  • declared lists Microsoft Intune as an integration source
  • declared lists Okta as an integration source
  • declared lists OneLogin as an integration source
  • declared lists Panther as an integration source
  • declared lists Sign in with Apple as an integration source
  • declared lists SimpleMDM as an integration source
  • declared lists Splunk (HEC) as an integration source
  • declared lists Storj as an integration source
  • declared lists Vector as an integration source
  • declared lists Wasabi as an integration source

Read from: Android build analysis (Exodus Privacy, reports.exodus-privacy.eu.org), documentation, documentation, integrations page

NetBird self-hosted

https://github.com/netbirdio/netbird

0 observed · 18 declared
  • declared lists Amazon Data Firehose as an integration source
  • declared lists Amazon S3 as an integration source
  • declared lists Authentik as an integration source
  • declared lists CrowdStrike Falcon as an integration source
  • declared lists Datadog as an integration source
  • declared lists Duo SSO as an integration source
  • declared lists FleetDM as an integration source
  • declared lists Google as an integration source
  • declared lists Huntress as an integration source
  • declared lists JumpCloud as an integration source
  • declared lists Keycloak as an integration source
  • declared lists Microsoft / Entra ID as an integration source
  • declared lists Microsoft Intune as an integration source
  • declared lists Okta as an integration source
  • declared lists Pocket ID as an integration source
  • declared lists SentinelOne Singularity / Data Lake as an integration source
  • declared lists Wazuh as an integration source
  • declared lists Zitadel as an integration source

Read from: documentation, documentation, documentation

Headscale self-hosted

https://github.com/juanfont/headscale

1 observed · 0 declared
  • observed ships the Tailscale DERP relay map SDK or integration code source

Read from: source code

Firezone open-source-saas

https://github.com/firezone/firezone

0 observed · 3 declared
  • declared lists Google as an integration source
  • declared lists Microsoft Entra ID as an integration source
  • declared lists Okta as an integration source

Read from: documentation

Proton VPN open-source-saas

https://github.com/ProtonVPN/android-app

2 observed · 0 declared
  • observed ships the Google Play Install Referrer SDK or integration code source
  • observed ships the Sentry SDK or integration code source

Read from: Android build analysis (Exodus Privacy, reports.exodus-privacy.eu.org), dependency manifest

Mullvad VPN open-source-saas

https://github.com/mullvad/mullvadvpn-app

1 observed · 0 declared
  • observed ships the Google Play Billing SDK or integration code source

Read from: Android build analysis (Exodus Privacy, reports.exodus-privacy.eu.org), dependency manifest

Where these apps are listed

See also the shared layer under every category.