Kicksecure

Live Mode

Booting into Live Mode is a simple as choosing Live Mode in the boot menu.

Time Attack Defenses

Time attacks are defeated by Boot Clock Randomization and secure network time synchronization through sdwdate (Secure Distributed Web Date).

TCP ISN CPU Information Leak Protection

Prevents TCP ISN based kernel side-channel attacks through Tirdad kernel module for random ISN generation.

Entropy Enhancements

Better encryption thanks to preinstalled random number generators.

AppArmor

AppArmor profiles restrict the capabilities of commonly used, high-risk applications.

Kernel Self Protection Settings

Kicksecure uses Kernel Hardening Settings as recommended by the Kernel Self Protection Project (KSPP).

Protect Linux user accounts against brute force attacks

By using pam tally2.

Strong Linux User Account Separation

security-misc

Extensive Documentation

The more you know, the safer you can be.

Android Support

Run Android applications using Anbox (outdated) or Kicksecure-Custom-Workstation using Android x86.

Virus Protection

Additional security hardening measures and user education through Kicksecure provide better protection from viruses.

Console Lockdown

Console Lockdown disables legacy login methods for improved security hardening.

Advanced Firewall

No open ports by default.

swap-file-creator

Running low on RAM isn't a security problem. swap-file-creator will create an encrypted swap file.

Vibrant Community

Forums
Contributors

History

By the same developers as Whonix, who have a nine year history of protecting our users against Real World Attacks.

Fully auditable

You don’t have to trust our word that it respects and protects you. It is independently verifiable by security experts and software developers around the world. This improves security and privacy for everyone.

Complete respect for privacy

Your data always belongs to you, and only you. We don’t make advertising deals or collect sensitive personal data. We’re funded directly by our users paying what they want. And that’s how it should be.

Warrant Canary

A canary confirms that no warrants have been served on the Kicksecure project.

Based on Debian

In oversimplified terms, Kicksecure is just a collection of configuration files and scripts. Kicksecure is not a stripped down version of Debian; anything possible in "vanilla" Debian GNU/Linux can be replicated in Kicksecure. About Kicksecure

Complete user freedom

There are no artificial restrictions on how users can reconfigure the system.

Digitally signed releases

Downloads are signed so you can verify they are genuine Kicksecure releases.

Freedom Software

Kicksecure is Freedom Software and contains software developed by the Free Software Foundation and the GNU Project.

Open Source

All of Kicksecure source code is licensed under OSI Approved Licenses. We respect the rights of our users. All of Kicksecure is available for review, scrutiny, modification, and redistribution by anyone. This improves security and privacy for everyone.

Research and Implementation Project

Be wary of those confidently calling themselves all-knowing, all-perfect. Kicksecure is an actively maintained research project making constant improvements -- no shortcomings are ever hidden from users.

Linux Kernel Runtime Guard (LKRG)

Better encryption thanks to preinstalled random number generators.