Skip to content
Features
-
Routes all system TCP and DNS traffic through Tor via nftables
-
Zero‑DNS leaks with volatile kernel‑level bind overlay on /etc/resolv.conf
-
Systemd‑native fail‑closed design that blocks cleartext leaks on crash
-
Stateless core stored entirely in tmpfs (no persistent residue)
-
Preserves LAN access and supports split‑tunneling exemptions
Config change
v0.4.5
New feature
·
Auth
RBAC
Breaking upgrade
Zero‑Leak shutdown + IPv6 flag + BYOD
Review required
v0.4.0
Mixed
·
Auth
RCE / SSRF
IPv6 support + DNS leak fix + Watchdog improvements
Review required
v0.3.5
New feature
·
Auth
RBAC
Breaking upgrade
Proactive integrity features
Review required
v0.3.0
Breaking risk
·
Auth
RBAC
Breaking upgrade
Volatile memory core, port shift, safety checks
No immediate action
v0.2.0
Feature
·
Diagnostic tools + firewalld detection
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
About
Languages
Python
·
Shell
·
Makefile
View on GitHub
Search tools, categories, lists, and users
Use ↑↓ to navigate, Enter to open, Esc to close
No results for ""
⌘K to open
↑↓ navigate
⏎ open