Outline VPN (Outline Foundation, ex-Jigsaw/Google) vs ZeroTier: which wins in 2026?
Head-to-head on the facts that decide the purchase: real prices in the provider's own unit, minimum, KYC, proof, payment and terms - every number sourced in the linked reviews.
The most polished way to hand censorship-resistant access to people who cannot configure a VPN: a few clicks in the Outline Manager builds a Shadowsocks server on a $3-6/month VPS, and family, newsroom or NGO members connect with ss:// access keys - which is why it powered Sudan protests, Myanmar crisis access and Iranian traffic spikes. It is the mirror image of Algo: audited four times with real obfuscation (WebSocket-over-TLS, prefixes, SDK strategies) but running a proxy, not a true VPN - no kill switch, no split tunneling on Linux, no anonymity, and your server's operator (you, or whoever you gave a key to) sits inside the trust boundary. Watch items: the server code has not had a tagged release since v1.12.3 in February 2025 while clients moved to the new non-profit, and the 2022 audit's high-severity findings were concentrated in the neglected Linux client.
A network fabric, not an anonymity VPN - and the honest category match for it is 'Hamachi successor with an enterprise SDN conscience'. ZeroTier connects YOUR devices into flat virtual Layer 2 (or routed Layer 3) networks with end-to-end encryption, works behind CGNAT, and its free Personal tier still costs nothing. The trust questions are the same shape as Tailscale's, answered differently: the four planetary root servers are run by ZeroTier Inc. and see peer identities and IP metadata (payload is end-to-end encrypted and roots only relay ciphertext), the hosted controller is closed, and the 2021 Pulse Security research showed root-server trust is real attack surface - responsibly fixed, but instructive. The 2025 story is commercial: a new CEO, a $13.5M Series A, a free tier cut to 10 devices/1 network, Essential jumped to $18/month with $2 per extra device, and the controller code moved into a 'nonfree' source-available directory with commercial-use restrictions. The homelab community that built ZeroTier's reputation is visibly migrating to Tailscale, NetBird and Nebula; the technology (true L2 bridging, non-IP traffic, moons) remains genuinely differentiated. The full Trail of Bits code audit promised 'after 2.0' never appeared - ZeroTier 2.0 itself is still effectively vapor in the mainline product.
Short answer: Outline VPN (Outline Foundation, ex-Jigsaw/Google) wins overall (4.7/10 vs 4.1/10). ZeroTier is the better pick if you care most about honest value. Facts checked 2026-11-05.
The facts
| Outline VPN (Outline Foundation, ex-Jigsaw/Google) | ZeroTier | |
|---|---|---|
| Overall score (0-10) | 4.7 | 4.1 |
| Privacy & proof | ||
| Logging claim | getoutline.org how-it-works (fetched 2026-11-03): 'It never logs your traffic or tracks… | We collect minimal metadata about active networks and devices; ZeroTier routes traffic… |
| Logging evidence | promise only (no proof) | promise only (no proof) |
| Audits | Radically Open Security 2018, Cure53 2018, Radically Open Security 2022, Cure53 2024 | Trail of Bits 2020, Pulse Security (Denis Andzakovic) 2021 |
| Jurisdiction | United States - Outline Foundation, 30 N Gould St. #57975, S… moreUnited States - Outline Foundation, 30 N Gould St. #57975, Sheridan, Wyoming (contact address in Terms of Service and on the Google Play developer listing); ToS governed by Wyoming law. The software itself has no jurisdiction: the operative jurisdiction for a self-hosted user is wherever their rented VPS is located and the laws governing their cloud provider. | United States - ZeroTier, Inc., 548 Market St, San Francisco… moreUnited States - ZeroTier, Inc., 548 Market St, San Francisco, CA (privacy policy); a Five Eyes member country; ZeroTier Europe B.V. in Utrecht acts as GDPR representative |
| Owner | unknown | unknown |
| Money | ||
| Intro price | $3 /mo | $18 /mo |
| Renewal price | not published | $18/mo |
| Anonymous payment | fiat | fiat |
| Account | ||
| Personal info | none for the software - no Outline account exists; access ke… morenone for the software - no Outline account exists; access keys are generated and shared without any registration. Your cloud provider (DigitalOcean, AWS, GCP) will require billing identity under their KYC. | email only for the hosted controller service; no government-ID verification |
| Kind | Self-hosted | Self-hosted |
| Facts checked | 2026-11-03 | 2026-11-03 |
Score breakdown
Outline VPN (Outline Foundation, ex-Jigsaw/Google) leads on privacy & logging (+1), security (+1), censorship resistance (+6) · ZeroTier leads on honest value (+4.5).
Outline VPN (Outline Foundation, ex-Jigsaw/Google) at a glance
++ What holds up
- Genuinely censorship-resistant: handshake-less Shadowsocks, mandatory AEAD ciphers, probing resistance, plus Shadowsocks-over-WebSockets behind TLS and 16-byte protocol disguises (client 1.15.0+/1.9.0+)
- Four published independent audits: Radically Open Security (2018, 2022) and Cure53 (2018, 2024), reports downloadable from getoutline.org - rare transparency at any price
- Non-profit stewardship since January 2026: Outline Foundation (Sheridan, Wyoming) with internet-freedom leadership, freeing it from the Google/Jigsaw association that some privacy users distrusted
- Near-zero friction for non-technical admins and users: point-and-click Manager, ss:// keys shared by email/SMS, per-key data limits, clients on every major platform (5M+ Play installs)
- No operator: Foundation 'does not operate VPN servers, does not route internet traffic, does not log VPN traffic, does not monitor connections' (ToS section 2, fetched 2026-11-03)
- Scale and field record: 30M+ monthly users, 140,000+ self-managed servers, documented use in Sudan, Myanmar, Iran and Ukraine crisis events
-- What to watch
- It is a Shadowsocks proxy, not a true VPN: no kill switch documented, no split tunneling on Linux, and per HN critics the per-application SOCKS design historically allowed traffic leakage outside the tunnel
- Shadowsocks is detectable under sustained scrutiny: China's GFW identified Shadowsocks servers as early as 2018 (GitHub issue #193) and 2025 client releases were frozen within ~5 minutes by Russian censors (issue #2679)
- Server releases have stalled: last tagged server version v1.12.3 shipped February 2025 - about 20 months without a release while clients iterate (The Proof Desk, 2026-10-31)
- Not an anonymity tool, by its own FAQ; websites 'will most likely be able to tell that your connection is coming from a cloud server', so streaming unblocking is hit and miss
- Trust moves to whoever runs the server: 'Someone with your access key could potentially inspect all your internet traffic if they have access to it' (project warning); public free-key lists are explicitly not affiliated and commonly dead or malicious
- Requires a cloud account and its KYC; the Manager is Windows/macOS/Linux only, so pure-mobile users cannot self-host
Full Outline VPN (Outline Foundation, ex-Jigsaw/Google) review →
ZeroTier at a glance
++ What holds up
- Free Personal tier (10 users, 10 devices, 1 network) - verified live 2026-11-03, though nerfed from the historical 25-node free tier per community reports
- True Layer 2 emulation: broadcast, multicast, LAN discovery, Ethernet bridging and non-IP traffic that WireGuard-based meshes cannot carry natively (protocol docs + VPNSmith)
- End-to-end encryption with keys that never leave devices; roots only relay ciphertext (operator security docs + founder statement on HN)
- Self-hostable controller and user-defined 'moon' root servers reduce dependency on ZeroTier Inc. infrastructure (operator docs)
- Two independent security research engagements engaged with and fixed: Trail of Bits crypto design review (2020, public summary) and Pulse Security root-identity research (2021, patched in 1.6.6 within days)
- FIPS 140-3 validated variant and SOC 2 Type II for the enterprise path; post-quantum Quantum platform for CNSA 2.0 mandates
-- What to watch
- The November 2025 pricing restructure cut the free tier to 10 devices/1 network and raised Essential to $18/month plus $2 per extra device - r/zerotier documented a >250 percent increase for legacy customers and a visible exodus to Tailscale, NetBird and Nebula
- The four planetary root servers are operated by ZeroTier Inc. in a Five Eyes jurisdiction and see member identities and IP metadata; the hosted Central controller is closed source
- Controller code now sits in a 'nonfree' directory under a source-available license that forbids commercial use without a paid license - the self-host path is narrower than it was under the old open-source positioning
- No forward secrecy in the standard VL1 protocol (documented in the operator's own protocol page); VPNSmith notes the proprietary transport has not received the breadth of independent audit and benchmarking that WireGuard has
- No public SOC 2 report (trust-center gated); the promised full Trail of Bits code audit never materialized
- ToS: all payments non-refundable, mandatory individual arbitration and class-action waiver, and 28 days of nonpayment leads to subscription deactivation and permanent deletion of network records
FAQ
Which is cheaper, Outline VPN (Outline Foundation, ex-Jigsaw/Google) or ZeroTier?
Outline VPN (Outline Foundation, ex-Jigsaw/Google) is cheaper at $3 /mo versus $18 /mo.
Which has better logging evidence, Outline VPN (Outline Foundation, ex-Jigsaw/Google) or ZeroTier?
Tie - both are at the same evidence level (policy-only).
Which renewal price is honest, Outline VPN (Outline Foundation, ex-Jigsaw/Google) or ZeroTier?
ZeroTier documents renewal at $18/mo; Outline VPN (Outline Foundation, ex-Jigsaw/Google) is free - no renewal price exists.
Which needs less KYC, Outline VPN (Outline Foundation, ex-Jigsaw/Google) or ZeroTier?
At least one provider does not document its KYC policy - treat it as unknown, not as "no KYC".
Which has the longer track record?
ZeroTier has the longer track record (since 2013).
Scores and facts: meta-reviews with dated sources - Outline VPN (Outline Foundation, ex-Jigsaw/Google) · ZeroTier. Method: how we verify. More: all providers compared · all head-to-heads.