Kicksecure ™ - Secure by Default Operating System

From Kicksecure

A secure by default operating system with the latest security research in place.

Kicksecure Desktop

Learn What Is Kicksecure?

Pre-installed applications are reviewed and configured for security

Fully Featured with Advanced Security Components

Protection from Targeted Malicious Updates

Kicksecure update servers know neither the identity nor IP address of the user because all upgrades are downloaded over Tor by default.

Kernel Self Protection Settings

Kicksecure uses Kernel Hardening Settings as recommended by the Kernel Self Protection Project (KSPP).

Time Attack Defenses

Time attacks are defeated by Boot Clock Randomization and secure network time synchronization through sdwdate (Secure Distributed Web Date).

TCP ISN CPU Information Leak Protection

Prevents TCP ISN based kernel side-channel attacks through Tirdad kernel module for random ISN generation.

Brute force attack protection

Protect user accounts against brute force attacks by using pam tally2 .

Entropy Enhancements

Better encryption thanks to preinstalled random number generators.

Live Mode

Booting into Host Live Mode is as simple as choosing Live Mode in the boot menu.

12 more amazing features →

Advanced Firewall

No open ports by default.


AppArmor profiles restrict the capabilities of commonly used, high-risk applications.

Strong Linux User Account Separation

Learn more about our Linux User Account Separation security-misc .

Extensive Documentation

The more you know, the safer you can be: Extensive Kicksecure Documentation

Virus Protection

Additional security hardening measures and user education to provide better protection from viruses.


Console Lockdown

Console Lockdown disables legacy login methods for improved security hardening.

Vibrant Community

Our vibrant Kicksecure community features Forums and Contributors

Based on Debian

Anything possible in "vanilla" Debian GNU/Linux can be replicated in Kicksecure. About Kicksecure

Digitally signed releases

Downloads are signed so genuine Kicksecure releases can be verified.

Warrant Canary

A canary confirms that no warrants have ever been served on the Kicksecure project.


Running low on RAM isn't a security problem. swap-file-creator will create an encrypted swap file.

Android Support

Run Android applications using Anbox (outdated).

Freedom Values

10 Years of Success

Created by the same developers of Whonix, who have successfully protected users against Real World Attacks for more than 10 years.

Open Source

All the Kicksecure source code is licensed under OSI Approved Licenses . We respect user rights to review, scrutinize, modify, and redistribute Kicksecure. This improves security and privacy for everyone.

Freedom Software

Kicksecure is Freedom Software and contains software developed by the Free Software Foundation and the GNU Project.

Research and Implementation Project

Be wary of those confidently calling themselves all-knowing, all-perfect. Kicksecure is an actively maintained research project making constant improvements -- no shortcomings are ever hidden from users.

Fully auditable

You don’t have to trust our word that it respects and protects you. It is independently verifiable by security experts and software developers around the world. This improves security and privacy for everyone.

Complete respect for privacy and user freedom

Kicksecure respects data privacy principles. We don’t make advertising deals or collect sensitive personal data. There are no artificial restrictions imposed on possible system configurations.


Interested in becoming an investor? See Project Metrics and contact details.

Unfinished: This wiki is a work in progress. Please do not report broken links until this notice is removed, use Search Engines First and contribute improving this wiki.