Privacy
Resources.

Run open-source LLMs locally with one command. Query your private documents or generate sensitive code on an air-gapped machine without any data leaving your machine.

Open-source desktop app to run and manage local LLMs easily. Daily private research and writing while keeping the option for optional cloud fallback.

Self-hosted beautiful web UI for any local LLM (Ollama, etc.). Deploy your own private ChatGPT-like interface on a home server.

User-friendly desktop app for discovering, downloading and running LLMs with GPU support.

Open-source API layer for building private AI applications on any local or self-hosted model server. Claude API-compatible endpoints for messages, file ingestion with citations, retrieval-augmented generation, tools, MCP, and agent workflows — all on your own infrastructure.

DuckDuckGo's AI search that combines real-time web results with AI-powered answers. No tracking, no profile building.

Privacy-first AI assistant. No data retention, no training on user data, zero-knowledge architecture.

OpenAI-compatible unified API aggregating 400+ models from 60+ providers including major labs and open hosts. Provides smart routing for cost, speed, and uptime with automatic fallbacks, plus per-provider data retention and logging policies.

AI inference cloud hosting 100+ open-source models via an OpenAI-compatible API. Drop-in replacement — swap your base URL to api.deepinfra.com/v1/openai and your code works unchanged. SOC 2 and ISO 27001 certified with zero data retention policy. Also offers dedicated GPU clusters (B200/B300) for private model deployments. Backed by NVIDIA. Raised $107M Series B in May 2026.

Proton's privacy-first AI assistant with end-to-end encryption. Conversations are never stored or used to train models. Swiss-based with zero-knowledge architecture.

Desktop AI agent for Windows, macOS, Linux, and Android that runs on your machine with BYOK (Claude, GPT, Gemini, Grok) or fully offline via Ollama. Executes multi-step background goals across browsing, coding, email, and files with approval gates before risky actions — no account, no cloud storage of conversations.

The gold standard for end-to-end encrypted messaging. Open-source protocol, minimal metadata retention.

Decentralized messenger with no phone number or email required. Routes messages through an onion network.

Self-hostable team communication platform built on the Matrix protocol with end-to-end encryption and federation.

Swiss-made end-to-end encrypted messenger that requires no phone number or email. Open-source audited client with minimal data collection.

Open-source mesh radio network for off-grid, encrypted text communication without cellular or internet.

Community-run public map of Meshtastic nodes heard on MQTT with real-time positions, telemetry graphs, traceroutes, device metrics (battery, voltage, utilization), and environmental sensor data. Open-source, no affiliation with the official Meshtastic project.

Decentralized messaging platform with no user identifiers — no phone number, no username, no email required. Uses disposable queue addresses and relay servers. Supports E2E encryption, file sharing, voice messages, and group chats. Open-source client and server.

Open-source peer-to-peer messaging app for activists, journalists, and anyone needing secure communication without central servers. Messages sync directly between devices over Tor, Bluetooth, or Wi-Fi. End-to-end encrypted with support for private messaging, forums, and blogs. No phone number or email required for signup. Survives internet blackouts via mesh sync. Audited by Cure53 and Radically Open Security.

Decentralized, privacy-preserving messaging protocol built on Tor v3 onion services. All communication is end-to-end encrypted with no central servers, no phone number or email required. Supports peer-to-peer chat and group conversations via untrusted disposable servers. Developed by Open Privacy Research Society. Data stored locally on device with full encryption.

All-in-one privacy app providing virtual phone numbers, encrypted email, private browsing, and virtual payment cards. Create up to 9 digital identities (Sudos), each with its own phone number, email, and private browser. End-to-end encrypted calls and messaging between MySudo users. Standard SMS, calling, and email with everyone else. No personal phone number required for signup. PCI-DSS compliant and SOC 2 Type II certified.

Open decentralized protocol for social networking and communication. Uses cryptographic keys for identity, relay servers for message distribution, and client apps for user interaction. No central authority, no account required, censorship-resistant by design. Supports direct messaging, groups, blogs, and media sharing through a growing ecosystem of relay operators and client applications.

Fully peer-to-peer messaging app with end-to-end encryption, video calls, and unlimited file sharing. No servers, no metadata collection, no phone number or email required — identity is a 24-word seed phrase. Built on Holepunch's open-source Pear Runtime. Available on desktop and mobile.

Swiss-based encrypted email with zero-access encryption, open-source clients, and optional anonymous signup. Includes calendar, drive, and VPN suite.

German-based encrypted email with full end-to-end encryption for subject lines, body, and attachments. Open-source, no tracking, and GDPR-compliant.

Belgian-based encrypted email with optional OpenPGP encryption, integrated calendar, documents, and drive. No ads, no tracking. Note: encryption is opt-in via manual PGP key management — default storage is not zero-access encrypted.

Dutch-based encrypted email from the creators of Startpage. PGP integration, disposable aliases, and custom domain support. No personal data required for signup.

Open-source email alias service by Proton. Create unlimited aliases to protect your real inbox, send and reply from aliases, with custom domain support, PGP encryption, and catch-all aliases. Based in Switzerland.

Open-source email alias service for anonymous email forwarding. Create unlimited aliases with custom domains, catch-all addresses, browser extension, and PGP encryption. Based in the UK with a freemium model.

Open-source password manager with zero-knowledge encryption, self-hosting support, and cross-platform sync.

Local, offline password manager with strong AES-256 encryption. No cloud dependency, full data control.

Open-source disk encryption for full volumes, partitions, or virtual encrypted disks. Supports plausible deniability.

Open-source client-side encryption for cloud storage. Zero-knowledge, transparent encryption before upload to Google Drive, Dropbox, OneDrive, etc.

Free open-source macOS security tools including malware detection, firewall monitoring, and persistence analysis.

Multi-engine file and URL scanner aggregating results from 70+ antivirus engines and domain reputation services.

Automated URL analysis tool that screenshots web pages and extracts IOCs. Generous free tier (50 private, 1,000 unlisted, 5,000 public scans per day), API available.

Romanian cybersecurity company providing advanced endpoint detection, network threat prevention, and cloud security for enterprises.

EFF's browser fingerprinting test to measure how uniquely identifiable your browser configuration is online.

Global DNS propagation checker to verify DNS records across multiple servers worldwide.

Multi-scanning malware analysis with 20+ AV engines (free tier) or 70+ (enterprise). Deep packet inspection and threat intelligence aggregation.

Open threat intelligence platform (now LevelBlue Open Threat Exchange). Pulse indicators, malware analysis, and collaborative threat research from global users. Formerly AlienVault.

Swiss project tracking malware distribution URLs. Focuses on collecting and sharing URLs used for malware distribution.

Free malware analysis service using sandbox execution. Submits samples for behavioral analysis and provides detailed reports.

Interactive online malware sandbox with real-time process monitoring. Allows full interaction with malware during execution for detailed behavioral analysis.

Enterprise mobile endpoint detection and response (EDR) with OS-level telemetry, behavioral baselining, and AI-driven threat hunting. Detects Pegasus, DarkSword, and mobile zero-day exploits across iOS and Android. Used by SOC teams for mobile DFIR and supply chain threat detection.

Network discovery and monitoring suite with device identification across 450K+ models, real-time alerts for new connections, auto-block for unknown devices, hidden-camera detection, Internet speed tests, and scheduled access limits. Desktop (Windows/macOS), mobile (iOS/Android), and always-on Fing Agent for Raspberry Pi or Docker.

Free, open-source packet capture and protocol analyzer (GPL). Deep inspection of hundreds of protocols with live capture and offline analysis on Windows, macOS, and Linux. Industry-standard tool maintained by the Wireshark Foundation with 100K+ community contributors.

Open-source intrusion prevention system that analyzes server logs and network traffic to detect and block malicious IPs in real time. Uses a community-sourced reputation network of 100K+ users sharing signals on aggressive IPs across 190 countries. Integrates with nginx, Apache, Cloudflare, fail2ban-style bouncers, and existing SIEM tools. Self-hosted or SaaS console.

Hardened, open-source firewall and routing platform based on FreeBSD. Features a modern web UI, plugin ecosystem (Suricata, Zenarmor, WireGuard), full TCP/IP stack inspection, VLAN support, and high availability. Fork of pfSense with faster release cycle and improved security practices.

Widely deployed open-source firewall and router based on FreeBSD. Enterprise-grade features: stateful packet inspection, VPN (IPsec, OpenVPN, WireGuard), traffic shaping, captive portal, and high availability. Large community and extensive documentation.

Simple DNS leak checker that tests whether your VPN or proxy is leaking DNS queries to your ISP. Shows your detected DNS servers, ISP, and location. Includes a WebRTC leak test. Operated by IVPN with a clear privacy policy. No sign-up needed.

Suite of client-side browser privacy testing tools covering IP address leaks, WebRTC leaks, Canvas, WebGL, and font fingerprinting, TLS/HTTPS client tests, QUIC/HTTP/3 fingerprinting, Chrome extension detection, DNS leak testing, geolocation API, content filter detection, audio fingerprinting, and more. No user tracking — no personal data collection, no non-essential cookies.

FIDO2/WebAuthn hardware keys for phishing-resistant authentication. Used by major tech companies and governments worldwide.

European-made open-source hardware security keys. Supports FIDO2, PGP, and TOTP. No proprietary cloud dependency.

Fanless mini PCs running VyOS or OPNsense. Dedicated hardware firewall for home or office network security.

Mini travel routers with OpenWrt, built-in VPN clients, and DNS filtering. Create a secure network anywhere.

Manufacturer of affordable ESP32-based development boards including T-Embed, T-Deck, T-Watch, and T-Display series. Popular platforms for running offensive security firmware like Bruce. Integrated displays, keyboards, CC1101 radios, and USB-C in compact form factors.

Smart home firewall with built-in VPN, DNS filtering, and network monitoring. Protects all devices including IoT.

Open-source hardware security key with PIN entry on the device itself. Supports FIDO2, TOTP, PGP, and offline password storage. Brute-force self-destruct after 30 failed PIN attempts. Firmware is fully auditable and runs on ESP32.

French manufacturer of high-quality Faraday bags, RF shielding pouches, and signal-blocking cases. Protects devices against remote wiping, tracking, and RF interception. Tested and certified shielding effectiveness across GSM, GPS, Wi-Fi, and Bluetooth frequencies.

Open-source FIDO2/WebAuthn security keys with fully transparent firmware. Supports FIDO2, U2F, and GPG. Available in USB-A, USB-C, and NFC form factors. Firmware is publicly auditable and community-reviewed. Solo V2 and Somu (NFC-only) models available.

Durable metal backup system for cryptocurrency seed phrases, passwords, and private keys. Uses high-grade stainless steel capsules with engraved character tiles — fireproof, waterproof, and corrosion-proof. Supports 12- and 24-word BIP39 seed phrases via modular tile systems (Seed12, Seed24, Capsule, Cassette). Includes tamper-evident security seals. Made in Poland.

Stainless steel recovery seed backup device for cryptocurrency wallets. Uses sliding character tiles to spell out seed words. Holds up to 96 characters (full 24-word BIP39 phrase). Fireproof, waterproof, and corrosion-resistant. Compatible with Ledger, Trezor, and all BIP39 hardware wallets.

Manufacturer of Librem laptops and phones with hardware kill switches, PureOS (Debian-based Linux), and a secure supply chain. Products include the Librem 14 and 16 laptops, Librem 5 and Liberty Phone, and Librem Key hardware token.

US-based manufacturer of laptops, desktops, and keyboards shipping with Linux preinstalled. Develops Pop!_OS and the COSMIC desktop environment. Handcrafted in the USA with open-source firmware on select models.

Search engine that doesn't track your queries, build profiles, or serve personalized results. No cookies, no logging.

European search engine delivering Google results without tracking. No cookies, no logging. Features Privacy Proxy for anonymous browsing.

The original onion-routed browser for anonymous web access. Defends against traffic analysis and network surveillance.

Security-focused OS that forces all connections through Tor using a gateway/workstation architecture. Provides network leak protection.

Live interactive browser testing in the cloud. Test across different browsers, OS, and screen resolutions without local VMs.

Privacy-first browser developed with Tor Project. Private mode enabled by default, fingerprinting resistance via letterboxing, no telemetry. Works with any VPN.

Privacy-first browser with built-in ad blocker, script blocker, and fingerprinting protection. Blocks trackers by default, offers Tor private windows.

Firefox fork focused on privacy and freedom. Removes telemetry, strengthens fingerprinting protection, includes uBlock Origin.

Advanced anti-detect browser with real fingerprint profiles from actual devices. Supports desktop and Android mobile emulation. Unlimited profiles.

Anti-detect browser with high-quality fingerprint spoofing at Chromium kernel level. Passes Pixelscan, BrowserLeaks, Whoer. Supports mobile fingerprints, API automation.

Search engine for Tor hidden services (.onion sites). Open-source, indexes clearnet-accessible .onion addresses, and filters illegal content. Provides anonymity-friendly search for the Tor network.

Open-source Android YouTube client without ads, tracking, or Google Play Services. Supports background playback, downloading, subscribing without an account, and importing from PeerTube and other federated platforms.

Open-source Chromium fork with built-in ad and tracker blocking via uBlock Origin, no telemetry, zero web requests on first launch, and anonymized Chrome Web Store requests to prevent Google from tracking extension downloads. Features !bangs for instant search, split view, and no cloud sync or account system. Available on macOS, Windows, and Linux.

Psylo isolates every tab into its own silo — separate storage, cookies, and a unique IP address from the Mysk zero-log proxy network (40+ servers). Spoofs timezone, locale, and user agent to match proxy location. Canvas randomization, ad blocker, URL tracker cleaner, and no account required. Built by Mysk, a team of privacy researchers from Canada and Germany.

Native WebKit browser for macOS, iOS, iPadOS, and Linux (beta) with zero telemetry, built-in ad and tracker blocking, and support for Safari, Chrome, and Firefox extensions. User-funded by Kagi with no ads, no data collection, and optional Kagi search integration.

User-funded search engine with no ads, no tracking, and no personal profiles. Offers ad-free results, bangs, source filters, and optional AI features — search history stays private and is never sold to advertisers.

Free, open-source metasearch engine that aggregates results from 70+ search engines without tracking, profiling, or storing your queries. Self-hostable with full control over instance configuration, rate limits, and which engines to query. No ads, no cookies, no JavaScript required.

Security-focused OS that uses virtualization to isolate your digital life into secure compartments called "qubes." If one qube is compromised, the others remain safe. Uses Xen hypervisor for strong isolation between domains.

Portable OS that runs from a USB stick without leaving any trace on the computer. All traffic routed through Tor, no data saved after shutdown (amnesic). Based on Debian with privacy tools pre-installed.

Debian-based Linux distro for ethical hacking, penetration testing, and digital forensics. Includes 800+ pre-installed security tools. Available in Security and Home editions. Lightweight and privacy-focused.

Distro for network security monitoring, intrusion detection, and log management. Includes Suricata, Zeek, Wazuh, TheHive, and Playbook. Full SOC platform for blue team operations.

Full-featured system emulator and virtual machine host for macOS and iOS based on QEMU. Uses Apple's Hypervisor framework for near-native performance. Supports x86_64, ARM64, RISC-V, and dozens of other architectures.

Red Hat's daemonless container engine for developing, managing, and running OCI containers. Podman runs containers under the current user (no root daemon required) with full Docker-compatible CLI, pod support, and rootless isolation via cgroups v2 and user namespaces.

Debian-based Linux distribution designed for digital forensics and penetration testing. Pre-loaded with 600+ security tools including Nmap, Wireshark, Metasploit, Burp Suite, John the Ripper, and Aircrack-ng. Multiple platform support: bare metal, VMware, VirtualBox, WSL, ARM, and cloud images. Custom kernel with patches for wireless injection.

Community-driven Linux distribution backed by Red Hat, known for shipping cutting-edge open-source technologies first. Features SELinux enforcement by default, RPM Package Manager, Wayland display server, Podman for rootless containers, and Flatpak for sandboxed apps. Fedora Atomic (Silverblue/Kinoite) offers immutable, image-based updates for enhanced security.

Privacy and security focused mobile OS with Android app compatibility. Substantial improvements to sandboxing, exploit mitigations, and the permission model. Hardened Vanadium browser, sandboxed Google Play compatibility layer, and encrypted backups via Seedvault. No Google services by default. Developed as a non-profit open source project since 2014.

All-in-one portable multi-tool for pentesting, hardware hacking, and RFID/NFC analysis. Features sub-GHz frequency analysis, RFID cloning (125kHz, 13.56MHz), NFC, iButton, infrared remote control, BadUSB, and GPIO for custom hardware interfacing. Extensive open-source ecosystem with custom firmware (Xtreme, Unleashed, RogueMaster).

Open-source ESP32 firmware for offensive security and red team operations. Runs on M5Stack Cardputer, LilyGo T-Embed, and other ESP32 devices. Features Wi-Fi attacks (deauth, evil portal, beacon spam), BLE attacks, BadUSB/DuckyScript payloads, RFID/NFC cloning via PN532, Sub-GHz RF via CC1101, IR tools, and more. AGPL-licensed with fully open hardware designs.

The search engine for internet-connected devices. Scans and indexes every publicly accessible service: webcams, routers, servers, industrial control systems, and more. Filter by port, country, OS, product, or vulnerability.

AI-driven penetration testing platform that automates vulnerability discovery, exploitation chains, and reporting. Combines machine learning with traditional pentest methodologies for faster, deeper assessments.

AI-powered breach and attack simulation platform. Continuously tests defenses with realistic adversary tactics, techniques, and procedures (TTPs). Maps findings to MITRE ATT&CK framework.

GPT-powered penetration testing assistant that guides through the testing methodology. Provides real-time suggestions for enumeration, exploitation, and post-exploitation based on context and findings.

Official Kali Linux tools directory — 600+ penetration testing and security tools organized by category: information gathering, vulnerability analysis, exploitation, wireless attacks, reverse engineering, and more. Each tool has documentation and package details.

European retailer specializing in hardware hacking and cybersecurity equipment. Stocks Flipper Zero, Proxmark3, ChameleonUltra, HackRF, RTL-SDR, BadUSB devices, RFID/NFC tools, lockpicks, WiFi deauthers, and development boards. Ships from France with EU/UK coverage.

Advanced iOS network diagnostics tool with LAN scanner (IP, NetBIOS, mDNS, Bonjour), ping with geolocation, traceroute on map, port scanner, DNS lookup (all record types + DNSSEC), whois, and internet speed test. Detects all connected devices on WiFi/VPN, supports Wake-on-LAN, full IPv6. Privacy-friendly: analytics data not linked to identity.

AI-driven web security scanner that tests for OWASP Top 10 vulnerabilities, configuration weaknesses, PCI DSS compliance, and data exposure. Generates compliance-ready reports with remediation advice.

Cloud-based vulnerability scanner that detects OWASP Top 10, SQLi, XSS, and misconfigurations in web applications. Supports authenticated scanning, API testing, and generates executive reports with remediation guidance.

Free remote website security scanner that checks for malware, blacklisting, injected spam, defacements, and outdated software. Scans DNS records, domain headers, and JavaScript integrity. Quick triage tool for initial website compromise assessment.

Qualys SSL Labs' comprehensive SSL/TLS server test. Evaluates certificate validity, protocol support, cipher strength, and known vulnerabilities (Heartbleed, POODLE, etc.). Grades servers A-F with detailed remediation steps. Industry standard for TLS assessment.

Simple, private file sharing with end-to-end AES-128-GCM encryption and links that auto-expire after 24 hours. Files up to 5 GB stored server-side; larger files transferred peer-to-peer via WebTorrent. No account required, no ads, no trackers. Open-source crypto library.

Cross-platform AirDrop alternative that shares files over your local WiFi network without internet. End-to-end HTTPS encryption, no servers, no account. Works on Windows, macOS, Linux, Android, iOS, and Fire TV. Open source (MIT).

Open-source tool that securely shares files, hosts websites, and runs encrypted chats over the Tor network. Creates temporary .onion addresses for each session. Preinstalled in Qubes OS, Tails, and Parrot OS. Available on Windows, macOS, Linux, Android, and iOS.

Self-hosted encrypted pastebin with zero-knowledge architecture. Data is encrypted/decrypted in the browser. Supports burn-after-reading, discussion threads, file attachment support, Markdown formatting with syntax highlighting, and Tor .onion service. No JavaScript required to view pastes.

Privacy-first VPN with anonymous account creation (no email required), crypto and cash payment options, and strict no-logs policy independently audited. WireGuard and OpenVPN on 500+ servers across 40+ countries.

Next-generation VPN with two modes: Fast mode (2-hop decentralized WireGuard) for daily use, and Anonymous mode (5-hop mixnet) for high-stakes operations where traffic correlation protection is critical. Traffic is mixed, delayed, and re-ordered to defeat timing analysis. Post-quantum key exchange via Lewes Protocol.

VPN with blind relay architecture — servers never see your decrypted traffic. Unlike "no-log" VPNs that rely on policy promises, Obscura is provably private by design. Uses WireGuard with cryptographically enforced blind relays that physically cannot decrypt your traffic. Now available on iOS and Android. QUIC-based stealth protocol for censorship circumvention. Exit partners include Mullvad. Accepts Bitcoin and Monero.

Cloud-based DNS resolver with ad blocking, tracker prevention, and customizable security filters. Supports DNS-over-HTTPS, DNS-over-TLS, and DNSCrypt. Configurable blocklists, allow/deny lists, and analytics dashboard. Free tier covers 300,000 queries/month.

Swiss-based VPN from the creators of Proton Mail. Strong no-logs policy, Secure Core architecture (traffic routed through privacy-friendly countries), Ad-blocker (NetShield), Stealth protocol for censorship bypass, VPN Accelerator (up to 400% speed increase), and full-disk encrypted servers. 20,000+ servers in 140+ countries. Free tier available with no data caps. WireGuard and OpenVPN protocols. Part of the Proton ecosystem (Mail, Drive, Calendar, Pass).

Comprehensive ad blocking and privacy protection suite with DNS filtering at its core. AdGuard DNS is a free, privacy-focused DNS resolver that blocks ads, trackers, and malicious domains across all devices. Self-hosted AdGuard Home for network-wide filtering. Also available as browser extensions, desktop/mobile apps, VPN, and email alias service.

Open-source DNS firewall with 100+ configurable blocklists for blocking trackers, malware, phishing, and adult content. Available as Android/iOS app, desktop client, and public DNS resolvers. Supports encrypted DNS (DoH, DoT, DoQ) with per-app filtering on mobile and real-time traffic inspection. Community-maintained threat intelligence feeds. Rethink Proxy Network launching soon.

Free browser-based privacy audit with 7 checks: supercookies (UIDH), HTTP header injection, DNS hijacking, DNS encryption status, TLS middlebox interception, ECH detection, and Quad9 DNS detection. All checks run client-side in under 10 seconds. No sign-up required. IP addresses are hashed with daily-rotating salt and never stored in plaintext. Includes an ISP reputation leaderboard based on real test results.

Open-source VPN platform with three tiers: Self-hosted (turn any VPS into a personal VPN server with one-click setup), Premium (paid, 20 countries, $4/mo), and Free (speed-limited, for censored regions). Supports WireGuard, OpenVPN, IKEv2, Shadowsocks, XRay (REALITY/VLESS), and AmneziaWG 2.0 with traffic obfuscation. Client apps for Windows, macOS, Linux, Android, and iOS.

Gibraltar-registered VPN with independently audited no-logs policy (annual Cure53 audits since 2021, 7th audit underway), dedicated IPs via Multi-hop, anti-tracker DNS, and WireGuard/OpenVPN on servers across 34 countries. RAM-only server infrastructure transition in progress. Accepts anonymous payment via Monero (XMR), Bitcoin, and cash. Open-source clients with full source transparency. IVPN Privacy Guides provide technical privacy education.

Open-source VPN client for iOS, macOS, iPadOS, and tvOS supporting OpenVPN (with XOR obfuscation) and WireGuard protocols. Features on-demand rules, custom routing, DNS over HTTPS/TLS, iCloud sync, Shortcuts automation, presets for major providers (Mullvad, IVPN, NordVPN, etc.), and interactive login with OTP support. No ads, no trackers, no background activities.

Open-source authoritative and recursive DNS server that can be self-hosted for privacy and security. Supports DNS-over-TLS, DNS-over-HTTPS, DNS-over-QUIC, DNSCrypt, DNSSEC validation and signing, ad blocking via DNS sinkhole with block lists, split horizon, and geolocation-based responses. Runs on Windows, Linux, macOS, and Raspberry Pi with a web admin console, Docker support, clustering, and DHCP server built-in.

DNS filtering platform by the team behind Windscribe. Supports encrypted DNS (DoH/3, DoT, DoQ), custom blocklists, service redirection, AI-driven malware blocking, and analytics. Native clients for macOS, Windows, Linux, iOS, and Android with silent deployment. SOC 2, ISO 27001, and ISO 27701 certified.

Free and open-source application firewall (Portmaster) that monitors all network connections and lets you set per-application rules. Includes built-in DNS filtering to block trackers system-wide, with encrypted DNS out of the box. SPN (Safing Privacy Network) available as a privacy network service with multi-hop routing.

End-to-end encrypted cloud storage based in Germany with zero-knowledge architecture. All files encrypted client-side with AES-256 before upload. Open source clients (AGPL v3) for web, desktop, mobile, and CLI. Includes network drive mounting, real-time sync, encrypted notes and chat, WebDAV/S3 hosting, and version history. 10 GB free tier.

End-to-end encrypted cloud storage with zero-knowledge architecture. Files encrypted client-side before leaving your device. Secure data rooms (Engage) for external collaboration, encrypted file sharing with revocable permissions, and digital signatures. ISO 27001 certified, GDPR, HIPAA, NIS2 compliant. 12 global data residency locations. Owned by Swiss Post.

Open-source continuous file synchronization that works peer-to-peer without any central server. Data never leaves your devices — encrypted in transit with TLS and perfect forward secrecy. Devices are authenticated via cryptographic certificates. Runs on macOS, Windows, Linux, FreeBSD, Solaris, and OpenBSD. No account required, no cloud dependency.

Zero-knowledge encrypted cloud storage from the creators of Proton Mail and Proton VPN. Files encrypted client-side with end-to-end encryption before upload — not even Proton can access them. Swiss jurisdiction under strict privacy laws. Open-source and independently audited. Includes photo backup, file sharing with password protection and expiry dates, and desktop sync. 5 GB free tier.

Open-source self-hosted alternative to Google Photos with AI-powered smart search (CLIP), facial recognition, automatic mobile backup, timeline view, map view, multi-user support with sharing, video transcoding, and OAuth/OpenID Connect support. Runs via Docker with hardware acceleration for ML inference. v2.0 stable release with semantic versioning, mobile apps for iOS and Android, and a built-in web interface.

Generate virtual payment cards to mask your real card details and limit merchant exposure. US-only (requires US bank account). Supports single-use, merchant-locked, and category-locked cards. Chrome/Firefox browser extension for instant card generation at checkout.

Curated directory of services that don't require KYC (Know Your Customer) identity verification. Categorized by service type with user ratings and comments. Community-maintained — anyone can submit new listings.

Open-source offline maps app using OpenStreetMap data. No tracking, no ads, no account required. Full offline navigation with turn-by-turn directions, voice guidance, hiking trails, cycling routes, public transit info, speed limits, and Wikipedia integration. Uses crowd-sourced map data from the community.

Open-source home automation platform that runs on your own hardware with local control and no cloud dependency. Integrates 1,500+ devices and services (Zigbee, Z-Wave, Matter, Wi-Fi), supports automations, dashboards, energy monitoring, and the Assist voice assistant. Data stays on your network — cloud is optional fallback only. Project of the Open Home Foundation.

Cross-platform note-taking app with Markdown and rich text, web clipper, and optional end-to-end encryption for sync. Notes are stored in an open format on your device; sync via Joplin Cloud, Dropbox, OneDrive, or self-hosted targets. Available on Windows, macOS, Linux, Android, and iOS.

Open-source, cross-platform notes app with audited end-to-end encryption and zero-knowledge sync. Notes and files are encrypted on your device before upload; only your passphrase can decrypt them. Supports Markdown, rich text, tasks, and secure file attachments on iOS, Android, macOS, Windows, Linux, and web. Part of Proton.

Cross-platform notes app with end-to-end encryption (XChaCha20-Poly1305), zero-knowledge sync, and encryption at rest on every device. Open-source client, web clipper, self-hostable sync server, notes vault, and app lock. Free tier with full privacy; apps for Windows, macOS, Linux, Android, iOS, and web.

Open-source Android keyboard from FUTO that runs entirely on-device with no internet access by default. Supports swipe typing, incognito mode, a clipboard manager, voice input, and customizable layouts. Available on Google Play, F-Droid, and as a direct APK from the official site.

Search across hundreds of breached databases to check if your email, phone, or password has been exposed.

Community-driven analysis of Terms of Service agreements, rating services on privacy, rights, and data handling.

Real-time breach notifications, historical breach database, and security incident tracking platform.

Free reverse phone lookup tool to identify unknown callers. Helps block unwanted telemarketing and scam calls.

Dark web monitoring and intelligence platform that crawls illicit forums, marketplaces, and paste sites for compromised credentials, leaked data, and threat actor activity.

Premium service with human researchers who manually submit opt-out requests to data brokers on your behalf.

Combines browser extension tracking blocking with data broker removal services. Continuous monitoring and re-submission.

Monitors 190+ people-search sites and automatically submits opt-out requests. Provides removal progress dashboard. ⚠️ CEO controversy: founder Dmitri Shelest was previously investigated by the FTC for running people-search sites before pivoting to removal — effectively creating and then selling the cure for the same problem. Use Optery or Incogni instead for an ethical alternative.

B2B-focused data removal with bulk employee protection, exposure reports, and custom removal strategies.

Automated service that contacts data brokers to remove your personal information from their databases.

Non-custodial multi-chain crypto wallet. Supports Bitcoin, Ethereum, Polygon, BNB Chain, and 80+ chains. No KYC required, open-source, self-custody with your keys.

Non-custodial multi-chain mobile wallet with built-in exchange. Supports Monero, Bitcoin, Ethereum, Solana, Zcash, and 17+ native chains with thousands of tokens. No KYC required for basic usage.

Decentralized peer-to-peer bitcoin exchange. Trade BTC for fiat or altcoins without intermediaries. No KYC, no registration, runs as Tor hidden service. Funds held in 2-of-2 multisig.

Bitcoin privacy protocol using zero-knowledge proofs. Enable private, unlinkable transactions through a cooperative pool.

Multi-chain gas refueling service. Swap any token for gas (ETH, BNB, MATIC, etc.) across 80+ supported chains with zero gas fees. No KYC, anonymous wallet refill. Also supports bridging gas from other chains when the destination has none.

Bitcoin mixer using CoinJoin technology for anonymous transactions. No logs, Tor-ready, ETH mixing, XMR bridge, and letter of guarantee for every order.

Non-custodial P2P Monero exchange built on Haveno. Desktop client with Tor integration, end-to-end encrypted trades, and support for multiple fiat and crypto payment methods. Open-source with arbitration-based dispute resolution.

Open-source hardware wallet with air-gapped QR-based signing. Supports Bitcoin, Ethereum, Solana, and 200+ chains. Companion app for desktop and mobile with multi-sig support. Fully air-gapped via QR code exchange — no USB, Bluetooth, or network connection required to sign.

Blockchain search engine supporting Bitcoin, Ethereum, Solana, and 18+ other chains. Features advanced search filters, privacy-focused API, transaction graph visualization, and address monitoring. No JavaScript required for basic queries.

Comprehensive Solana block explorer with token analytics, NFT tracking, DeFi protocol data, and real-time transaction monitoring. Supports SPL tokens, Metaplex NFT metadata, and program interaction analysis.

Open-source Bitcoin block explorer and mempool visualizer. Real-time fee estimates, mempool congestion tracking, block details, address lookup, Lightning Network statistics. Self-hostable, no JavaScript required, Tor-friendly.

Official block explorer for Arbitrum One, built by Etherscan. Tracks L1→L2 transactions, token transfers, smart contract interactions, and gas fees. Supports the full Arbitrum ecosystem including cross-chain messaging and batch verification.

Privacy-focused exchange aggregator that compares rates across 30+ providers for 300+ cryptocurrencies. No account required, no KYC, supports direct wallet-to-wallet swaps with built-in Tor support. Routes trades through non-custodial platforms to minimize counterparty tracking.

Official bridge for transferring assets between Ethereum and Arbitrum One. Supports ETH, ERC-20 tokens, and custom tokens with native Arbitrum messaging. Includes canonical token list and standard bridging with fraud-proof confirmation window.

Zcash-powered mobile wallet with shielded transactions, CrossPay private cross-chain payments, built-in swaps via NEAR Intents, and Keystone hardware wallet integration. Formerly Zashi, rebranded to Zodl in 2026. Developed by Zcash Open Development Lab (ZODL). No tracking, no accounts, open-source.

No-KYC cryptocurrency exchange supporting 936+ coins with fixed and floating rates. Operates since 2018 with no registration, no volume limits, and 24/7 support. Registered in Seychelles.

Check and revoke ERC20 token approvals across Ethereum, Polygon, Arbitrum, Optimism, and 100+ EVM chains. Supports batch revoking, approval risk scoring, exploit monitoring, and a browser extension that warns before signing dangerous transactions. Open-source tool maintained since 2021.

Multi-chain liquidity aggregator connecting 20+ chains through 15+ bridges and 50+ DEXs. Finds optimal routes for cross-chain swaps, token transfers, and native gas bridging. 4x audited by leading security firms.

Non-custodial instant cryptocurrency exchange with 1,248+ currencies and 50,000+ trading pairs. Supports fixed and floating rates, routes orders across CEXs and DEX liquidity pools (Uniswap, PancakeSwap), and offers optional Pro accounts for cashback and AML checks. No registration required for basic swaps.

Non-custodial instant cryptocurrency exchange supporting over 2,800 coins and fiat pairs with floating and fixed rate options. No sign-up required for standard swaps; trades execute directly wallet-to-wallet via aggregated liquidity. Optional accounts unlock loyalty cashback and history across devices.

Lightweight Monero wallet with built-in Tor and I2P support, fast sync (minutes, not hours), coin control, subaddress management, and hardware wallet integration (Ledger). Supports multi-signature wallets and offline signing. Reproducible builds for supply-chain verification. Available on Linux, Tails, Windows, and macOS. Onion and I2P addresses available for download.

Multi-chain DEX aggregator powered by THORChain. Swap native assets across 26+ blockchains (Bitcoin, Ethereum, Solana, XRP, Zcash, Dogecoin, etc.) without wrapping, bridging, or KYC. Compares pricing from 1inch, Matcha, Uniswap, and others to find the best cross-chain route. Also offers THORChain LP yields with impermanent loss protection, THOR staking, multi-sig vaults (THORSafe), and a cross-chain name service. Non-custodial — swap directly from your own wallet.

Buy gift cards, mobile top-ups, and prepaid vouchers from hundreds of retailers using Bitcoin, Lightning, Litecoin, Dash, Dogecoin, Monero, Ethereum, and more. Available in US, Canada, UK, Europe, and Australia. Since 2014.

End-to-end encrypted SMS service using real physical SIM cards with zero-access encryption and personal keypair. No email required for signup, TOR support, open-source encryption module. Also offers virtual numbers, Crypton Travel eSIM in 145+ countries, Crypton Mobile (permanent eSIM with voice & data), email aliases, BYOD (bring your own device), and a powerful REST API. Accepts crypto (XMR, BTC, ETH) and credit cards.

Send and receive SMS messages without giving away your phone number. Pay per message via Lightning (Bitcoin) — no account, no KYC, no personal data required. Rent virtual numbers globally to receive SMS verification codes.

VoIP app for temporary or long-term virtual phone numbers in 300+ US and Canadian area codes. Make calls and send SMS/MMS over Wi-Fi or mobile data from one device. Supports multiple numbers, call forwarding, custom voicemail, auto-replies, and separate contact lists. Paid plans from about $7; made by AffinityClick.

Anonymous eSIM data plans with crypto payment support and no personal information required.

No-KYC eSIM, VPN, and virtual phone number services for anonymous mobile connectivity without identity verification.

Real 4G/5G mobile proxies from carrier networks, carrier-based SMS verifications, and global eSIMs unified in a privacy-focused, crypto-friendly platform. No KYC required, 99.9% uptime, API access with MCP support for AI agents. Pay with BTC, ETH, SOL and more.

Privacy-focused eSIM provider with instant setup in 190+ countries. No signup, no email, no ID verification. Accepts Bitcoin, Lightning, Monero, Zcash, and 50+ altcoins via self-hosted BTCPay Server. Includes data plans, phone numbers, and SMS verification services.

Send and receive SMS online with virtual burner numbers. Dashboard for managing conversations, email notifications for incoming messages, and dynamic routing for reliable delivery. Plans from £5.99/mo with 100 SMS included.

SMS verification service providing real non-VoIP phone numbers from physical SIM cards. Supports 1,200+ services across 150+ countries. Numbers start at $0.02 with automatic refunds on failure. No email required, accepts crypto (XMR, BTC, ETH). API available.

Search for usernames across 500+ websites to discover social media accounts, forum profiles, and platform presence. Useful for identifying an individual's online footprint across the web.

Search an email address or phone number for associated Google accounts, Gravatar profiles, data breaches, and other public records. Includes Google IDs, Drive files, and Calendar exposure checks.

Industry-leading reverse image search by computer vision. Finds where an image appears online, tracks modified versions, and identifies the original source. No cookies, no tracking.

Attack surface management search engine that maps internet-connected assets, open ports, vulnerabilities, and IoT devices. Scans IPs, domains, and URLs for security posture assessment.

Comprehensive breach and leak database search engine with advanced filtering and alerting capabilities.

Aggregates wireless network data from wardriving contributions worldwide. Query by SSID, BSSID, or location with encryption, frequency, and geolocation details. Powers the Network Intel tool on this site.

Web-based directory of OSINT tools organized by data type and source. Covers social media, public records, business intelligence, and technical reconnaissance tools.

Deep-web intelligence search engine indexing public web, dark web, document repositories, and paste sites. Search leaked databases, dark web forums, and document dumps from a single interface.

Graph-based investigation platform mapping relationships between people, domains, infrastructure, and data via transforms querying 120+ data partners. Covers social media, breach data, dark web, and public records; free Community edition available.