My personal privacy and security stack. Curated tools and services I trust and use daily.
DNS filtering and analytics with query logs hosted in Switzerland. Blocks ads, trackers, and malicious domains at the network level before they ever reach your devices.
Enterprise-grade network gateway running VLAN segregation and UniFi IDS/IPS. Isolates IoT, work, and guest traffic into separate network segments with built-in threat detection.
Primary desktop browser hardened with strict privacy settings, disabled telemetry, and enhanced tracking protection. The only major browser that respects user privacy by default.
Mobile browser with extension support for uBlock Origin and privacy add-ons. Syncs with desktop Firefox for a consistent hardened browsing experience across devices.
Routes traffic through the Tor network for anonymous browsing and .onion site access. Essential for dark web OSINT research and bypassing censorship.
Wide-spectrum content blocker with custom filter lists. Eliminates ads, tracking scripts, and malicious content at the browser level with minimal performance overhead.
Privacy-first search engine that does not track searches or build user profiles. Replaces Google as the default search provider across all browsers.
End-to-end encrypted email hosted in Switzerland under strict privacy laws. Zero-access encryption means not even Proton can read your messages.
Email aliasing service that generates unique addresses for every account. Prevents cross-site tracking and keeps your real email address out of data breaches.
Exclusive real-time communications platform with end-to-end encryption for messages, calls, and video. No metadata collection, no ads, no compromise.
Primary password manager with SSH agent integration and service account support for API key management. Generates, stores, and autofills unique credentials across all devices.
Encrypted backup password manager within the Proton ecosystem. Provides redundancy for credential access with end-to-end encryption and secure sharing.
Hardware security keys for phishing-resistant two-factor authentication. Supports FIDO2, WebAuthn, and OTP protocols for the strongest available account protection.
TOTP-based two-factor authentication app with encrypted cloud backup. Runs alongside 1Password as a dedicated 2FA solution within the Proton ecosystem.
Full-disk and volume encryption for hard drives, USB drives, and external storage. Creates encrypted containers and partitions with strong AES-256 encryption.
Transparent file-level encryption for cloud storage. Creates encrypted vaults that work with any cloud provider, adding a zero-knowledge encryption layer to Dropbox, Google Drive, or any sync service.
Virtual card service that generates unique card numbers for every online purchase. Prevents merchants from storing your real payment details and limits exposure from data breaches.
Privacy-focused cryptocurrency with built-in transaction obfuscation, paired with Trezor hardware wallet for cold storage. Provides financial transaction privacy that traditional banking cannot offer.
Local AI inference engine running on 5090 GPUs for sensitive work. Keeps proprietary data and confidential prompts entirely on-premises with zero external API exposure.
AI coding assistant for development and non-sensitive workloads. Handles everything from code generation to research while Ollama handles confidential material locally.
Primary desktop OS. Arch-based rolling release with a performance-optimized kernel, BORE scheduler, and x86-64-v3 builds. Full control, no telemetry, no forced updates.
Powers all servers, homelabs, and virtual machines. The foundation for everything — no proprietary telemetry, full transparency, and total control over the stack.
Open-source hardening script generator for Windows and macOS. Recommended for anyone still on Windows — produces scripts that disable telemetry, remove bloatware, and tighten OS-level privacy.
Windows antispy tool with granular control over telemetry, diagnostics, and data collection. Recommended for friends and family still running Windows — toggle hundreds of privacy switches with one click.
Windows debloating and optimization utility. Removes pre-installed apps, disables unnecessary services, and applies performance tweaks. Great recommendation for anyone who won't leave Windows.
iOS devices with Advanced Data Protection enabled, extending end-to-end encryption to iCloud backups, photos, and notes. Combined with iOS family content controls for managed device security.
Remote DNS filtering profiles deployed across family devices. Provides network-level ad blocking, malware protection, and content filtering without installing apps on each device.
All product names, logos, and brands are property of their respective owners. Used for identification purposes only.