VPN's that have the Kill-Switch and Split-Tunneling working simultaneously. ProtonVPN implemented it on Windows, but not implemented it on Mac OS. This is critical for security on the Internet to stay connected when sites prevent Internet connection when using a VPN. It is very unsafe to have to disconnect ProtonVPN when connecting to sites that block VPN's, especial when multiple browser tabs active. This does not seem to be planned within ProtonVPN.

**ExpressVPN** and **ProtonVPN** (as of late 2025/early 2026) are the primary providers that support using split tunneling and a kill switch simultaneously.

* **ExpressVPN**: Its "Network Lock" kill switch is specifically designed to work with split tunneling, recognizing excluded apps and allowing them to pass unprotected while blocking all other traffic if the VPN connection drops.

* **ProtonVPN**: Historically, enabling the kill switch disabled split tunneling; however,

**ProtonVPN Windows app version 4.3.7, November 25, 2925 and later** now allows users to enable both features concurrently, though this compatibility may not yet be available on all platforms like Linux or macOS.

* **Private Internet Access (PIA)**: Offers an app-based kill switch that functions alongside its various split tunneling options (app-based, inverse, IP/domain-based), providing safety for excluded applications.

* **NordVPN**: Supports both split tunneling and a kill switch (network and app-based), but documentation does not explicitly confirm that the kill switch dynamically respects split tunneling exclusions in the same way ExpressVPN does; users must verify specific behavior during connection drops

Apparently ProtonVPN has implemented this feature in Windows:

Proton removes restrictions on simultaneous feature usage on Windows
- Users can now use Split Tunneling, Kill Switch, and NetShield altogether
- Split tunneling is currently in beta for Mac and Linux users

If you’ve been using Proton VPN on Windows, you’ve likely encountered a frustrating "pick two" scenario. For a long time, the app forced users to make a compromise: if you wanted to use split tunneling to route specific apps outside the VPN, you often had to disable other critical security features.

According to  an X post by the company, that friction is finally gone. Proton has just rolled out an update for its Windows application that allows users to enable Split Tunneling, the Kill Switch, and NetShield simultaneously.

"Proton VPN's latest update on Windows lets you benefit from all three at once, so you can feel relieved while you browse the internet securely," the company tweeted.

If this is available in Windows; why not available in Mac OS?

I Agree. I would really like to see to be able to combine LAN-access with a kill switch on the VPN tunnel to the internet, to be able to print, manage the LAN, etc. (on iOS/ MacOS) Now I have to choose between not being able to print and not using the kill switch which risks exposure when the VPN tunnels drops. Switching between the two as a workaround resets the tunnel and also risks exposure. WiFi on router doesn't work when a device switch to 5G.

But still does not work for specific Domain/Subdomains. Like internal company networks or IP ranges. Only applications can be excluded on macOS.

As of 4.37 they both work together - split tunneling and advanced kill switch. Works like a charm.

I would never use a VPN without a Kill Switch; that's why I won't use ProtonVPN Split Tunneling.

Many thanks to the Proton team for implementing the feature in 4.3.7!

This works now on Windows in 4.37. Took long enough :-) But thanks. Nice job

How is this not a feature yet?