diff --git a/bin/clean.sh b/bin/clean.sh
index 4cb05d5..edb9676 100755
--- a/bin/clean.sh
+++ b/bin/clean.sh
@@ -276,7 +276,7 @@ safe_clean() {
 
         # Hard-coded protection for critical apps (cannot be disabled by user)
         case "$path" in
-            *clash* | *Clash* | *surge* | *Surge* | *mihomo*)
+            *clash* | *Clash* | *surge* | *Surge* | *mihomo* | *openvpn* | *OpenVPN*)
                 skip=true
                 ((skipped_count++))
                 ;;
diff --git a/lib/common.sh b/lib/common.sh
index 370f50e..9447a2c 100755
--- a/lib/common.sh
+++ b/lib/common.sh
@@ -1378,6 +1378,9 @@ readonly DATA_PROTECTED_BUNDLES=(
     "*Clash*"               # Capitalized variants
     "com.nssurge.surge-mac" # Surge
     "mihomo*"               # Mihomo Party and variants
+    "*openvpn*"             # OpenVPN Connect and variants
+    "*OpenVPN*"             # OpenVPN capitalized variants
+    "net.openvpn.*"         # OpenVPN bundle IDs
 
     # ============================================================================
     # Development Tools - Git & Version Control
diff --git a/mole b/mole
index 4df3df8..b0e599d 100755
--- a/mole
+++ b/mole
@@ -22,7 +22,7 @@ SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
 source "$SCRIPT_DIR/lib/common.sh"
 
 # Version info
-VERSION="1.10.10"
+VERSION="1.10.11"
 MOLE_TAGLINE="can dig deep to clean your Mac."
 
 # Check if Touch ID is already configured