Intelligent Network Roaming & Watchdog Manager for WireGuard on Windows
The WireGuard companion fox you didn't know you needed.
Crafted with care by FoxDen Software
-purple.svg){kind=icon}
-success.svg){kind=icon}
"On iOS and Android, WireGuard connects when you leave the house and disconnects on your home Wi-Fi. On Windows laptops... you were left clicking buttons manually like a caveman or hacking fragile Task Scheduler scripts."
On mobile devices, WireGuard has seamless on-demand rules: your phone automatically engages the VPN when you connect to public networks, and gracefully turns off when you're back on home Wi-Fi. On Windows, however, laptops have historically lacked intelligent roaming, leaving users with an annoying choice between manual toggling or sluggish speeds when local LAN traffic gets routed through remote tunnels.
WireFox bridges that gap. It is a lightweight, modern background assistant and system tray daemon for Windows that automates your WireGuard tunnel based on your current network environment. It validates trusted networks using hardware ARP gateway probing (iphlpapi.dll) to prevent evil-twin Wi-Fi spoofing, continuously monitors UDP handshake health, and provides instant tray controls.
winget install FoxDenSoftware.WireFoxRun in PowerShell as Administrator:
irm https://raw.githubusercontent.com/TalviFox/WireFox/main/install.ps1 | iexNote
Why Elevation is Required: Managing Windows kernel tunnel services (WireGuardTunnel$...), routing table modifications, and raw ARP gateway queries requires Windows Administrator privileges. WireFox runs elevated silently at logon via a secure Windows Scheduled Task without prompting UAC on every boot.
Prefer a portable single-file executable? Grab WireFox.exe directly from the Releases page.
🔄 Intelligent Network Roaming
Automatically disconnects and bypasses the tunnel when connected to your home or office Wi-Fi for full gigabit LAN speeds; automatically re-engages WireGuard the second you connect to public Wi-Fi, hotel portals, or cellular hotspots.
🛡️ Gateway MAC (ARP) Anti-Spoofing
Identifies trusted networks not just by Wi-Fi SSID name, but by default gateway MAC address using Layer-2 SendARP. Protects Ethernet connections and prevents "evil twin" rogue access points from tricking your PC into disabling VPN.
🐕 Handshake & Session Watchdog
Actively monitors kernel handshake freshness via the official WireGuardNT command layer. Detects silent UDP drops, firewall blocks, captive portals, and driver sleep stalls, automatically executing graceful recovery before you notice a dropped connection.
🎨 Dynamic 5-State Fox Shield
Glanceable, high-resolution visual feedback both in your system tray and on the main dashboard:
- 🟢 Emerald Green: Tunnel Active & Encrypted on untrusted networks.
- 🔷 Classic Teal: Connected to a Trusted Network (LAN / Wi-Fi) - Tunnel gracefully Bypassed.
- 🟠 Amber Orange: Temporary Session Active (15m Pause, Split-Tunnel, or Connecting).
- 🔴 Crimson Red: Unprotected Alert - Disconnected on an untrusted public network.
- ⚪ Monochrome Gray: Inactive / Manually Disabled / Offline (Airplane Mode).
⚡ Context-Aware Quick Actions
Smart status controls that adapt to your connection state:
- Dynamic Pause / Resume Toggle: Pause protection for 15 minutes when needed; while paused, the button transforms into Resume VPN
▶️ so you can cancel early with a single click. - Smart Split-Tunneling: Temporarily routes only specific subnets through the tunnel; grays out with clear tooltips if not configured.
- Contextual Full Tunnel / Restart: Restore full routing when split-tunneling, or perform a clean Restart Tunnel 🔄 connection drop and key renegotiation for instant troubleshooting.
💻 Native Windows 10 & 11 Experience
Crafted with modern WPF and native dark/light themes. Sits quietly in the system tray, responds to interactive Windows Toast notifications with actionable buttons, and consumes zero CPU while idle.
🔒 Zero Telemetry & 100% Audited Driver
No accounts, no external cloud dependencies, no background telemetry, and zero ads. Interacts directly with the official, audited WireGuardNT service driver.
WireFox is open-source and independent. You can cryptographically verify the integrity of your downloaded executable directly against GitHub Releases at any time without trusting third-party certificates:
irm https://raw.githubusercontent.com/TalviFox/WireFox/main/verify.ps1 | iexWireFox respects your system. It leaves no lingering drivers, registry residue, or background daemons. You can uninstall natively from Windows Settings > Installed Apps, via Settings > Clean System Removal in the app, or with one command:
irm https://raw.githubusercontent.com/TalviFox/WireFox/main/uninstall.ps1 | iexWireFox is built using the .NET 10.0 Windows Desktop SDK.
# Clone the repository
git clone https://github.com/TalviFox/WireFox.git
cd WireFox
# Build single-file release executable
dotnet publish WireFox.csproj -c Release -r win-x64 --self-contained true -p:PublishSingleFile=true -o publish/Or run build.bat in the root directory.
WireFox is developed with the assistance of AI coding tools. In the spirit of open development and personal accountability: I don't post what I don't run.
Every feature, script, and build is actively dogfooded, tested, and run on my own daily-driver machines before it is published here.
WireFox source code is available under the PolyForm Perimeter License 1.0.0.
- ✅ Open to inspect, fork, and hack: You are free to run, study, modify, build, and distribute WireFox for personal, educational, or internal use.
- 🛡️ Anti-theft & non-compete protection: You may not use this software or its source code to provide or market any product or service that competes with WireFox or acts as a commercial substitute for it.
For full license terms, see the LICENSE file or visit PolyForm Project.
Crafted with care by FoxDen Software
- WireGuard® is a registered trademark of Jason A. Donenfeld.
- WireFox is an independent companion project developed by FoxDen Software. It is not affiliated with, endorsed by, or sponsored by Jason A. Donenfeld or the official WireGuard development team.