Choose how each app reaches the internet.
Your company VPN, Tailscale, WireGuard, a server you can SSH into, or straight out. Circuit sends every app, and every site, the way you choose, while all your VPNs keep running side by side.
Free to use · 14-day Pro trial · macOS 15 or later · Apple silicon and Intel
One Mac, too many networks.
VPNs were built to take over the whole Mac. The moment you need two of them, or only part of one, you end up toggling them all day.
The company VPN slows everything down
Video calls, music and updates crawl through the office. Circuit lets them go straight out, while work apps stay on the VPN.
Two VPNs refuse to share
Tailscale for your own machines, a commercial VPN for everything else. Circuit runs Tailscale itself, so they never fight over routes or DNS.
One app needs another country
Send one app, or one site, out through your own server abroad. Everything else stays local and fast.
Everything is per app, or per site.
Circuit is a network extension that sees each app's connections and relays them the way you ask. No config files, no command line.
Route apps across your VPNs
Pick any interface for any app: a VPN, Wi-Fi around the VPN, or blocked. Safari and every helper process count as their app.
Exits of your own
Built-in WireGuard, OpenVPN, SSH (like ssh -D, nothing to install on the server) and Tailscale, with an exit node per app.
Chains
Run one connection inside another: Tailscale through WireGuard, SSH through Tailscale. Cross a slow or filtered border fast, leave where you like.
Domain rules
Company domains through the work VPN, one site through another country, an ad network nowhere. Lookups follow the same route.
Rules that follow the network
Different routes at the office Wi-Fi, limits on your iPhone's hotspot, Low Data Mode handled for you.
Bandwidth limits
Cap any app's download and upload speed, so backups and updates never eat the connection.
See where you come out
Check which country and address each route really leaves from, and how much every app is sending, live.
Stays out of the way
Lives in the menu bar and uses next to no CPU while its window is closed. Nothing is routed until you ask.
Domain rules
A domain and all its subdomains go their own way, for every app or just one. Internal names resolve on the VPN's own DNS server; blocked names never resolve.
Network profiles
Tell Circuit what should change on a network: at the studio, Safari goes straight out; on a phone's hotspot, other apps pause and Music is capped.
How it works
Install and allow
macOS asks you to allow Circuit's network extension once. Your existing VPNs stay installed and untouched.
Add your exits
Pick up the VPNs you already run, or add WireGuard, OpenVPN, SSH or Tailscale connections inside Circuit.
Point apps and sites
Choose a route per app or per domain. Check where it exits, and change it any time.
Pricing
Use Circuit free for as long as you like. Every Pro feature is yours to try for 14 days, no account needed.
Free
- Route apps across the Mac's own VPNs and interfaces
- Go around a VPN, or block, per app
- Live traffic per app, activity log, exit checks
Pro
- Everything in Free
- Built-in WireGuard, OpenVPN, SSH and Tailscale
- Chains, domain rules and network profiles
- Bandwidth limits per app
- A year of updates included; keep using it after that
Questions
Is Circuit a VPN?
No. Circuit decides which connection each app uses. It can run connections of its own (WireGuard, OpenVPN, SSH, Tailscale), but it does not sell or run servers.
Will it get along with my company's VPN?
That is the point of it. Circuit does not replace or reconfigure other VPNs; it works on top of them and sends each app to whichever interface you choose.
What does Circuit send to the internet on its own?
Update checks; when the trial starts, a one-way hash of your Mac's hardware ID (so reinstalling does not restart the trial; the ID itself never leaves your Mac); once you have a license, a weekly check for revoked keys; and, only if you turn them on in Settings, crash reports (stack traces and versions, nothing about your apps or connections). The app has no accounts, no analytics and no ads. Your traffic goes only where your routes send it. (This website counts visits with Cloudflare Web Analytics, which sets no cookies and does not track you across sites.)
Does it work with Safari?
Yes. Safari's network traffic runs in a separate WebKit process; Circuit recognizes it as Safari's.
Which Macs are supported?
macOS 15 Sequoia or later, on Apple silicon and Intel.
Do I need a Tailscale account or the Tailscale app?
You need a Tailscale account to join your tailnet, but not the app: Circuit runs its own Tailscale device inside its network extension.