Catalogue
Three lines of hardened hardware, assembled to order. Each page states what the device changes, and what it does not.
Start from your adversary
A device is only useful against a defined adversary. Each line below starts from a specific use; compare what each one actually changes.
« Compact & sober »
Refurbished Google Pixel 8a (Akita) reflashed with GrapheneOS, a hardened Android-based OS with verified boot under user-controlled keys, hardware memory tagging, and optional sandboxed Google Play. 128 GB storage.
« The balanced one »
Refurbished Google Pixel 9 Pro reflashed with GrapheneOS: verified boot under your keys, hardware memory tagging (MTE), Titan secure element, optional sandboxed Google Play. 256 GB.
« The newest »
A Google Pixel 10 Pro (Tensor G5) flashed with GrapheneOS, a hardened Android fork. It pairs a fresh hardware security baseline with verified boot, hardware memory tagging, and a guaranteed update window into 2032.
« Recent hardware »
A 13th-gen Intel ThinkPad X1 Carbon Gen 11 (1 TB NVMe) provisioned for Qubes OS compartmentalisation. The proprietary firmware is retained — this generation is not supported by Coreboot or Heads — so hardening here is OS-level, not firmware-level.
« No Intel ME »
Hardened ThinkPad T14 Gen 3 AMD: Ryzen Pro (no Intel ME), full-disk encryption, Qubes OS / Tails / hardened Debian. The performance-vs-security sweet spot.
« Maximum firmware trust »
Hardened ThinkPad X1 Carbon Gen 8: Coreboot + Heads (TPM-measured boot), boot-time TOTP, anti-tamper seal. Qubes OS or Tails. Refurbished, the light-and-affordable tier.
« Workshop-patched — supported build »
GL.iNet Mudi V2 (GL-E750V2) portable LTE router running our maintained ekaii fork of blue-merle: SIM-swap-driven IMEI randomization, MAC/BSSID randomization with vendor-OUI mimicry, and tmpfs-backed wiping of client connection logs. Changing an IMEI is restricted or unlawful in some jurisdictions; the buyer is responsible for compliance.
« 5G & Wi-Fi 7 — experimental »
GL.iNet Mudi 7 (GL-E5800) 5G/Wi-Fi 7 travel router running our experimental port of the blue-merle anti-tracking package. Reduces forensic traceability through IMEI and MAC randomization on SIM swap; it is not anonymity and does not hide you from your carrier.
« Intact — flash it yourself »
GL.iNet Mudi V2 (GL-E750V2) 4G LTE travel router shipped with stock, unmodified GL.iNet OpenWrt firmware. WireGuard/OpenVPN, optional Tor routing, removable 7000 mAh battery — sold untouched for users who want to flash and harden it themselves.
« Amnesic — all via Tor »
Ready-to-boot Tails USB: an amnesic OS that routes all traffic through Tor and leaves no trace. Optional encrypted persistent volume.
« Erase & rescue »
A 64 GB USB stick pre-loaded with Ventoy multiboot plus SystemRescue and other open live tools for system recovery, disk imaging, and secure wipe. Honestly, it is a convenience bundle of free open-source software you could assemble yourself.
« Versatile RF tool »
Flipper Zero with community firmware: an RF / NFC / infrared / GPIO multi-tool for research and pentesting. Lawful use only.
« FIDO2 security key »
FIDO2 / OpenPGP hardware security key: phishing-resistant 2FA and an OpenPGP smartcard. Open-lineage hardware and firmware.
« Passive RF containment »
An RF-shielding pouch that attenuates cellular, Wi-Fi, Bluetooth, GPS and RFID/NFC signals only while the device is fully enclosed and the closure is sealed. It is a temporary containment tool, not a permanent privacy measure.
« Charge, no data »
USB data blocker ("USB condom"): passes power, not data. Defeats juice-jacking at public charging ports.
