The transparent version: GlassBox VPN is operated by Open Source Security, Inc. (OSS), a Delaware S-Corporation. The service runs on standard open source software with full configurations published on Forgejo. We do not modify, fork, or redistribute the upstream projects. This page documents the components, the operator, and the trademark situation.
What GlassBox VPN Is, Legally
GlassBox VPN is a VPN service operated by Open Source Security, Inc. ("OSS"), a Delaware S-Corporation. OSS is the entity responsible for the infrastructure, the service, and the customer relationship.
GlassBox VPN is not a software product. We do not sell software. We operate a service: the WireGuard servers, the DNS resolvers, the blocklist infrastructure, and the customer-facing systems. The configurations that run those systems are published openly on Forgejo as a transparency measure.
Relationship to Upstream Projects
GlassBox VPN does not modify, fork, or redistribute the source code of any upstream open source project. We use unmodified versions of WireGuard, Unbound, OpenSSH, AppArmor, and other components, applying only configuration and integration on top.
All upstream projects retain full ownership and control of their code. We are users and supporters of these projects, not maintainers or distributors.
Open Source Components
GlassBox VPN uses the following open source projects, all unmodified:
The full list of open source components, including dependencies, is reflected in the published server configurations on Forgejo. Configuration files reference every package installed on the system.
Blocklist Sources
The DNS and IP blocklists used by GlassBox VPN are aggregated from multiple sources, all of which are public. We do not maintain these lists ourselves; we apply them.
- Hagezi Pro++: comprehensive multi-purpose blocklist
- OISD Big: community-maintained ad and tracker list
- OSS custom additions: supplementary entries maintained by OSS
- Streaming overlay: OSS-maintained list of streaming service domains
The combined and deduplicated lists are published in plain text at oss-blocklist.net/dns-combined.txt and oss-blocklist.net/ip/ip-combined.txt. These files are rebuilt nightly.
Infrastructure Provider
GlassBox VPN servers are hosted at Psychz Networks data centers in Chicago, Los Angeles, Dallas, and Ashburn, VA. Psychz provides the physical hardware, network connectivity, and bandwidth. OSS operates the servers and is the sole party with administrative access.
Psychz's privacy policies and terms apply to the underlying hosting relationship. Psychz does not have access to GlassBox VPN customer data; they provide bare-metal hardware and network transit only.
Trademarks
"GlassBox VPN" and "GlassBox" are trade names used by Open Source Security, Inc. to describe specific services and philosophies.
Use of these names for purposes of discussion, review, comparison, education, journalism, or commentary is permitted and encouraged. The only prohibited use is impersonation or misrepresentation, including presenting third-party products or services as being created, endorsed, or operated by OSS when they are not.
Third-Party Trademarks Referenced
- WireGuard® is a registered trademark of Jason A. Donenfeld.
- Stripe® is a registered trademark of Stripe, Inc.
All other trademarks, including names of streaming services, VPN providers, and software products mentioned for comparison or descriptive purposes, are the property of their respective owners.
Operator and Jurisdiction
GlassBox VPN is operated by:
- Entity: Open Source Security, Inc.
- Form: Delaware S-Corporation
- Jurisdiction: State of Delaware, United States
- Service location: United States only
- Founded: March 2025
Operating jurisdiction means GlassBox VPN is subject to United States law, including federal and Delaware state law. GlassBox VPN is not a service designed to evade or circumvent US legal process. The privacy policy describes what could and could not be produced under US legal process.
Last updated: May 2026