How it works

Clear architecture. Simple outcome.

You connect with an app or extension. LogicGuard authenticates your device, provisions a WireGuard peer, and your traffic travels through an encrypted tunnel.

Client path

What happens on your device when you connect.

User opens LogicGuard (app or Chrome extension)

App / extension talks to the local agent when Full VPN is enabled

Local agent configures WireGuard with keys kept on-device

Encrypted tunnel reaches the LogicGuard VPN server

Internet destinations see the VPN exit path

User → App → Agent → WireGuard → Server → Internet

Private keys never leave the device in plaintext API responses.

Control plane

How LogicGuard coordinates accounts, devices, and peers.

●

App ↔ Laravel API

Authentication, device registration, server lists, and connect/disconnect orchestration.

●

API ↔ Database

Users, subscriptions, devices, peers, and connection logs — without storing WireGuard private keys.

●

API ↔ VPN agent

Allowlisted HMAC actions create, disable, or remove peers on the WireGuard node.