Our lab houses several experimental technologies that are designed to achieve our goals.
We design, develop, and deliver software to protect communications, resist censorship, and defend core privacy rights across the globe.
An experimental anycast network designed to add noise and randomness directly into our global network layer.
Power efficient hardware designs and low-emissions global infrastructure configurations engineered to scale sustainably.
Transparency is a fundamental tenet of security. All of our code, system specifications, and automation playbooks are hosted publicly in the open. Explore our full ecosystem, audit our tools, or contribute directly.
packetframeRust, eBPFA modular, high-performance eBPF data-plane framework written in pure Rust. It provides a pluggable runtime for discrete datapath modules – such as fast-path forwarding, egress randomization, DDoS mitigation, and flow sampling – allowing them to be dynamically loaded, attached to XDP/TC network interfaces, and observed independently with absolute minimal overhead.packetpathComing soonA network automation platform that detects problems (such as high latency, packet loss, and BGP session failures) across your infrastructure and automatically applies policy-driven BGP remediation actions – complete with built-in safety interlocks to prevent cascading failures.freesocks-control-planeTypeScript, ConvexThe control plane that makes FreeSocks work: the sign-up flow, anonymous accounts, proxy-key issuance, memberships and donations, and the admin console – everything except the proxy servers themselves. Accounts need no email, phone or password, no client IP addresses are stored, and nothing loads from third parties. It runs on a self-hosted Convex backend with a Svelte front end, so anyone can run their own.linux-hardened-unredactedLinux kernelA highly secured downstream Linux kernel patchset featuring upstream security reinforcements, proactive defense enhancements, and hardened configuration baselines designed to resist local and remote privilege escalation vectors without sacrificing performance.Internet censorship and surveillance have gotten worse every year. Security matters more than ever as AI-driven vulnerability discovery gets better. The people we build for depend on our machines to reach the open Internet safely, and every one of those machines runs Linux. The kernel underneath is the part that arguably matters most. Our Tor…
Censorship is on the rise, and has been for a while. Censors are working hard every day to restrict access to crucial information that challenges their authoritarian regimes across the world. It’s important that we continue work to counter their efforts, and develop new and innovative ways to build out anti-censorship infrastructure which helps people…