VPNonly
Routes only chosen Mac apps through a VPN, leaving the rest of the Mac untouched
VPNonly lets you put individual Mac apps on a VPN while everything else stays on your normal connection, using WireGuard and the built-in macOS firewall. It works with NordVPN, Mullvad, Proton, IVPN, AirVPN or any WireGuard config, but Safari can't be routed (WebKit hands connections to system processes) and it's Apple Silicon only. It's $19 once, or free from the terminal, versus rivals like SplitTunnel.app that put your whole Mac on the VPN first and charge $49 a year.
What holds up
- +One-time $19, or free from the terminal — no subscription like SplitTunnel's $49/year
- +Privileged engine is MIT licensed with published checksums from v1.9.8 — you can audit what runs as admin
- +If the tunnel drops, routed apps are blocked instead of silently falling back to your normal connection
Mind the limits
- −Apple Silicon only — Intel Mac owners can't use it
- −Safari can't be routed at all, so you're limited to Chrome, Firefox, Arc or Brave
- −DNS lookups still go through your normal resolver, so it won't hide which sites you visit from your ISP
Featured here? Take the badge
Put it on your site — it links back to this review. Free for every listed product, always.
<a href="https://stillworks.dev/products/p/vpnonly/"><img src="https://stillworks.dev/badge/vpnonly.svg" alt="Picked by StillWorks" width="250" height="54"></a>