platform

veil on windows

planned

The second target, not yet shipped. Every check needs a native implementation — none of the linux probes translate. This page states what each check will answer once it exists, and where the ceiling is genuinely lower than linux.

the honest ceiling

where windows matches linux, and where it doesn't

Most checks will run at full depth. Two do not, and the support matrix says exactly why — read below rather than taking "supported" as a blanket claim.

Encrypted DNS

full

VPN tunnel

full

Traffic egress

full

Firewall

full
Reads Windows Defender Firewall profile state. A third-party firewall replacing it reads as "applied by something else," not as a failure.

IPv6 leak guard

full

MAC randomization

partial
Windows exposes the adapter's MAC but not a per-network randomisation policy the way NetworkManager does. veil can report the current MAC and whether Windows' own random-hardware-addresses setting is on; it cannot report per-SSID behaviour.

Encrypted messaging

full

Disk encryption

full
Reports BitLocker status. An unencrypted machine with a TPM present is still unencrypted — that is not softened into a pass.

there is no windows build yet

The table above is the plan, read straight from the same support matrix the app itself will read. There is nothing to download today. The download page shows windows as planned, not as a button that quietly does nothing — see it there before asking here.

see the download page