Security Architecture

Zero-Trust. Zero-Telemetry.

A transparent look at Cyphra's threat model, network boundary controls, and technical verification methods.

🔒

Zero Telemetry

Cyphra contains zero phone-home diagnostics, zero crash pings to corporate servers, and zero behavioral telemetry. Your search terms never leave your computer.

🛡️

Network Firewall

Integrated network filter list compiled directly into the binary, intercepting tracker domains before TCP/TLS handshakes are initiated.

🔑

Isolated Storage

First-party cookie and LocalStorage partitioning. Trackers embedded in iframes cannot read cookies set on top-level parent domains.

Defended Surveillance Vectors

🚫 Blocked Tracking Networks

The following networks are intercepted and dropped at the socket layer:

Google Analytics & Tag Manager (google-analytics.com, googletagmanager.com)
DoubleClick Ad Serving (doubleclick.net, adservice.google.com)
Meta / Facebook Pixel & Graph (connect.facebook.net)
Criteo Behavioral Retargeting (criteo.com)
ScoreCardResearch & Comscore (scorecardresearch.com)
Hotjar & Microsoft Clarity Session Replay (hotjar.com, clarity.ms)

🛡️ Anti-Fingerprinting Hardening

Cyphra neutralizes fingerprinting algorithms:

Canvas Randomization: Sub-pixel color micro-perturbation defeats canvas 2D hashing.
WebGL Masking: Uniform GPU render string returned to WebGL queries.
AudioContext Jitter: Injects slight frequency jitter into oscillator nodes.
DNT & GPC Headers: Automatically injects DNT: 1 and Sec-GPC: 1.

Verifiable SHA-256 Cryptographic Checksums

Every binary published by Cyphra is checksummed with SHA-256 so you can verify that the binary you download has not been tampered with in transit.

📜 View Full Release Hashes & Changelog