# VPN kill switch, split tunnel and protocols — classification

Observed / calculated: 2026-09-12, Australia/Sydney  
Method: original calculation over stored `platforms` rows.  
Not: a product ranking, a numeric security score, a live-app test, a leak result, a guarantee of anonymity, or a compliance certificate.

## Cells

1. Yes / no / unknown / not-applicable / plan_dependent as stored when the platform key exists.
2. Unknown: the `platforms` key is missing, or that OS key is missing, or the stored value is unknown. Unknown is not unsupported.
3. plan_dependent is not a universal yes.
4. A documented yes is not a leak test.

## Hand arithmetic

- IVPN kill switch: `4+1=5`. iOS is no after the 1 Aug 2023 iOS 16+ removal.
- ExpressVPN WireGuard id: `3+2=5`. Windows, iOS, Android; not macOS or Linux.
- Proton OpenVPN: `1+4=5`. Linux GUI only.
- PureVPN split: `2+3=5`. Windows and Android.
- Personal iOS split: `4+7=11 ≠ 12`. NordVPN unknown is not no.

## Café iPhone + Windows filter

`personal_vpn` AND documented iOS AND documented Windows AND kill switch yes on both AND split tunnel yes on both. Unknown cannot satisfy. Result on the stored dataset: 4 pass. Leak tests: 0.

A business overlay is not a consumer public-internet kill switch. Same class is not a ranking. Counts are integers, not billed totals.

See `/guides/vpn-platform-kill-switch-guide`.