Development is ongoing and contributions are welcomed.
Time attacks are defeated by Boot Clock Randomization and secure network time synchronization through sdwdate (Secure Distributed Web Date).
Prevents TCP ISN based kernel side-channel attacks through Tirdad kernel module for random ISN generation.
Kicksecure uses Kernel Hardening Settings as recommended by the Kernel Self Protection Project (KSPP).
Run Android applications using Anbox (outdated) or Kicksecure-Custom-Workstation using Android x86.
Additional security hardening measures and user education through Kicksecure provide better protection from viruses.
No open ports by default.
Running low on RAM isn't a security problem. swap-file-creator will create an encrypted swap file.
By the same developers as Whonix, who have a nine year history of protecting our users against Real World Attacks.
You don’t have to trust our word that it respects and protects you. It is independently verifiable by security experts and software developers around the world. This improves security and privacy for everyone.
Your data always belongs to you, and only you. We don’t make advertising deals or collect sensitive personal data. We’re funded directly by our users paying what they want. And that’s how it should be.
In oversimplified terms, Kicksecure is just a collection of configuration files and scripts. Kicksecure is not a stripped down version of Debian; anything possible in "vanilla" Debian GNU/Linux can be replicated in Kicksecure. About Kicksecure
Downloads are signed so you can verify they are genuine Kicksecure releases.
Kicksecure is Freedom Software and contains software developed by the Free Software Foundation and the GNU Project.
All of Kicksecure source code is licensed under OSI Approved Licenses. We respect the rights of our users. All of Kicksecure is available for review, scrutiny, modification, and redistribution by anyone. This improves security and privacy for everyone.
Be wary of those confidently calling themselves all-knowing, all-perfect. Kicksecure is an actively maintained research project making constant improvements -- no shortcomings are ever hidden from users.