Patanyx Browser Leave less behind.
The first public build of PATANYX is out, for Windows and Linux, and it introduces PATANYX's Fingerprint Divergence: different sites see different fingerprintable signals, reducing their ability to correlate your activity across the web. Download it here.
What is PATANYX?
PATANYX is a lightweight, Rust-based desktop browser built with privacy at its core. Protection is part of the architecture from the start, not something buried behind a maze of settings.
EdgeXene designed PATANYX around transparency, local control, and verifiable protection while staying honest about what no browser can hide.
PATANYX runs on Windows and Linux and is actively under development.
What it does that others don't
Everything is built in -- nothing to install, no account to make.
Ad and tracker blocking Automatic Windows & Linux
Ads and trackers are stopped inside the browser itself, from first launch. One switch turns it off.
Sites reported as phishing, refused on sight Automatic Windows & Linux
Over 550,000 hosts reported as phishing are refused from first launch, before the browser makes a single network connection.
Three sources build it. Phishunt supplies the fresh edge: its pipeline watches Certificate Transparency logs as new domains are issued, alongside several threat-intelligence feeds, and most of what it reports has not reached the other two yet. It lists only what is live at that moment and drops the rest, so PATANYX keeps what it saw there for 30 days after it leaves that feed, and only for as long as the domain still resolves. PhishDestroy adds the depth: over 180,000 scam domains it tracks and works to have taken down, almost none of them carried by the other two. Phishing.Database supplies the bulk, a community-maintained record of confirmed phishing domains and an official data vendor for VirusTotal.
See who a page talks to Automatic Windows & Linux
Open one panel and read every other company your tab just contacted. On Windows it also counts what was allowed and what was stopped; on Linux the engine does not report per-request matches, so the panel lists the hosts and says how many were requested.
Encrypted DNS Opt-in Windows
Before your browser can open a website, it normally has to ask where that site lives. On a typical connection, those DNS requests may be visible to your Internet provider -- creating a readable trail of the domains you look up.
PATANYX lets you route those requests through Mullvad or Quad9 using encrypted DNS, so your ISP can no longer directly read the domain names contained in those DNS lookups.
It doesn't make you invisible, destination IP addresses and other network metadata can still reveal clues about where you're connecting, but it removes one of the clearest sources of browsing-history exposure from the network.
Private Tunnel Opt-in Windows & Linux
Send this browser's traffic through a server you choose. Bring a WireGuard file from your own server or a provider. Nothing else on your computer is affected, and if the tunnel drops, pages stop rather than going out unprotected.
Keep pages off your local network Automatic Windows
A page served over plain HTTP has no business reaching your router, your printer or anything else on your network, so it will not be allowed to. Pages you load over HTTPS are unaffected. This blocks the direct route; it cannot catch every trick that hides where a page is really connecting, so keep your router and devices updated too.
Copy the link, not the tracking On demand Windows & Linux
Right-click, Copy clean link. PATANYX unwraps the redirector and strips the tracking parameters. What lands on your clipboard is where the link actually goes.
Permissions start switched off Automatic Windows
Camera, microphone, location and notifications start switched off, from the first launch. A site that wants one stays blocked until you unblock it yourself, in the privacy panel.
Forget this site On demand Windows
Clear one site's cookies without touching anything else you are signed in to.
Right-click into quarantine On demand Windows & Linux
Not a private window -- a stricter one. JavaScript off, blocking on, and no stored state at all, from a right-click on the link.
Closing the browser signs you out Automatic Windows & Linux
Every launch starts a new session. Sites stay signed in while the browser is open, and forget you when it closes.
Freeze a tab On demand Windows & Linux
One click and the tab stops making network requests entirely, until you let it go again.
A vault for passwords and notes Automatic Windows & Linux
Credentials and private notes in one encrypted file that never leaves your machine. A recovery key is issued when you create the vault and shown once; it is the only way in if you forget the passphrase. Keep it somewhere safe: a recovery key that is lost cannot be reissued. If your vault has no recovery key at all, the Backup tab will make you one.
It locks itself after five minutes with nothing happening. Typing anywhere in the browser counts, so it will not lock while you are working. With a minute to go you get a countdown and a button that says I'm still here. You can change five minutes to 15, 30 or 60, or switch the whole thing off. On Windows, locking your workstation or letting it sleep also locks the vault.
Fill a saved password On demand Windows
A key lights up in the toolbar only when this site has a saved password, so its absence tells you as much as its presence. Sign in on one part of a site and it fills on the rest -- which part of a site counts as the same site is decided by the public suffix list, not by matching text, so a password saved on your bank is never offered to a stranger who happens to share an ending.
Bookmark Manager On demand Windows & Linux
Bookmarks get folders you make yourself, a pinned Quick Access row that stays put whatever you search for, and an import that reads the file your old browser exports. They are encrypted on your computer and open with your vault, so a saved page is not a list anyone can read off your disk.
A toolbar you arrange Opt-in Windows & Linux
Choose whether toolbar buttons show their names or just their icons. The setting is kept in a plain file on your computer and nothing about it leaves the device.
Save a page as PDF On demand Windows
Every browser prints to PDF. This one writes a record of the address it came from alongside it, so the file can still answer where it came from months later.
Catch a page that changed On demand Linux
Bookmark a page, then snapshot it as it was served to you, and the Integrity button tells you later whether the site quietly changed it. A fingerprint is stored, not a copy; it lives with the bookmark, and deleting the bookmark deletes it.
Anti-Impersonation Automatic Windows & Linux
Some letters from other alphabets look identical to ours, so a scam site can spell your bank's name perfectly. PATANYX never prettifies an address: a domain built from look-alike letters is shown in its raw form, and the disguise falls apart.
Getting Premium ready Building Windows & Linux
Everything behind the paid tier is being wired up: licenses, checkout, and the features they unlock. Launching soon. Nothing is for sale yet.
Multi-Tab Search Building Premium Windows & Linux
One search across every open tab. Matching text appears in context, grouped by tab; pick a match to jump to its tab with the search ready to step through. The search runs on your device and the query never leaves it. Quarantine tabs are never searched, and PATANYX reads each page as the server sent it, so text a page builds after loading is not included.
Tab Switcher Building Premium Windows & Linux
Jump to any open tab by typing part of its title or address. The closest match ranks first, even with letters missing.
Batch Tab Actions Building Premium Windows & Linux
Select several tabs at once, then close, bookmark, or set them aside together.
Smarter Bookmark Search Building Windows & Linux
Bookmark search in the Library that ranks the closest match first, even with letters missing.
PATANYX vs your browser
Comparison based on each browser's default settings upon first use.
| PATANYX | Chrome | Edge | Firefox | Brave | Opera | Vivaldi | |
|---|---|---|---|---|---|---|---|
| Privacy StanceWhat it refuses without being asked | |||||||
| Third-party cookies are refused by default | |||||||
| Blocks ads and trackers from first launch, no extension | |||||||
| Network TransparencyWhat you can see and choose about where traffic goes | |||||||
| Shows every host a page contacted Allowed/blocked split: Windows | |||||||
| More than one independent phishing-list source | |||||||
| Encrypted DNS that never silently falls back Windows | |||||||
| Local Data CustodyWhat stays on your machine | |||||||
| Built-in password vault | |||||||
| On-device scan for personal info in a photo Premium | |||||||
| Web NavigationWhether it works like a browser should | |||||||
| Ordinary sites and video play without tweaking | |||||||
| Warns if a saved page quietly changed Linux | |||||||
What it is built from
One Rust program, no runtime downloads. PATANYX sends us no browsing history, no search terms, no usage analytics and no crash reports. Its only self-initiated network activity is an anonymous, signed check for updates and blocklist refreshes -- plus, if you have chosen an encrypted resolver, an occasional check that the resolver is still reachable. Web pages are displayed by software your computer already has and keeps up to date on its own. One caveat: on Windows, Microsoft's WebView2 engine reports a minimum of component health data that no application is allowed to switch off.
| Layer | Component | License |
|---|---|---|
| Language | Rust 1.96, pinned for reproducible builds | Apache-2.0/MIT |
| Windowing | tao + wry, one chrome webview and one webview per tab | Apache-2.0/MIT |
| Web engine | WebKitGTK on Linux, Microsoft WebView2 on Windows | supplied by the OS |
| Encrypted DNS | DNS-over-HTTPS to Mullvad or Quad9, opt-in, Windows only | third-party service |
| Vault crypto | Argon2id key derivation + XChaCha20-Poly1305 encryption | MIT/Apache-2.0 |
| Page comparison | SHA-256 digest ladder: bytes, structure, then visible text | MIT/Apache-2.0 |
| Signed updates | Ed25519 signature verification, key compiled into the binary | BSD-3 |
| On-device OCR | tract (pure-Rust ONNX inference) + PP-OCR models, shared with XLiteOCR | MIT/Apache-2.0 |
| Blocklist data | phishunt.io for the fresh edge, PhishDestroy for depth and Phishing.Database for the bulk, plus phishunt sightings retained up to 30 days for as long as they still resolve. Merged, checked hourly and republished when it changes | MIT / CC0 |
| Chat transport | X25519 key exchange, rustls, local network discovery | MIT/Apache-2.0 |
License
PATANYX Browser is licensed under the Apache License 2.0. Every build ships with a NOTICE file and a full inventory of all third-party crates, every one under a permissive license, so there are no copyleft obligations and no surprises. That license lets anyone read, build and audit every line of it.
What it cannot hidethe limits, in plain words
What it cannot hide
It cannot hide that you connected to something.
Every request has to be routed somewhere, and that destination, the numeric address of the machine you reached, is the one thing encryption cannot cover. Hiding a site's name (in lookups, and inside the connection where sites support it) still leaves the number, and the number often identifies the site by itself. Whoever carries your traffic sees that list, when you contacted each address, and roughly how much data moved.
What is covered.
On an HTTPS site the rest is encrypted: the part of the address after the domain, the contents of the page, anything you type into it, your passwords and your cookies. Encrypted DNS stops your provider being handed a readable list of every site you look up, and on Windows the site name is hidden inside the connection too -- measured, not assumed, though only where a site supports it.
Signing you out is not erasing.
A new session cannot use the last one's cookies, but they do sit on disk in between. Against someone holding your machine, the vault is the answer, not this.
It is not an anonymity tool.
There is no onion routing and no defense against someone watching traffic patterns. The built-in tunnel moves what your local network sees to a server you picked. It changes who can watch, not whether anyone can. If you need nobody in the path to know which server you reached, use Tor.
Anti-fingerprinting is noise, not invisibility.
PATANYX adds small site-specific noise to the canvas, audio, and graphics readouts fingerprinting scripts lean on hardest, so the reading that identifies you on one site does not match the one another site sees. Screen size, fonts, and plenty of other details still read out exactly as they are, and code running in a worker is not covered. PATANYX does not try to make you look like everyone else; it tries to keep one site's picture of you from matching another's.
Check that your download came from EdgeXeneverify the signature yourself
Check that your download came from EdgeXene
Every released binary is signed with Sigstore, and the signature is recorded in a public, append-only log. That lets you confirm the file was published by EdgeXene and that not one byte has changed since. It is not a safety rating, and nobody has vetted the software on your behalf.
cosign verify-blob PATANYX.exe \ --bundle PATANYX.exe.sigstore.json \ --certificate-identity=contact@edgexene.io \ --certificate-oidc-issuer=https://accounts.google.com
On Linux the file is named PATANYX and its bundle
PATANYX.sigstore.json; the command is otherwise
identical.
It should print Verified OK. Anything else means do not run the file. Both values below are required, so they are stated plainly rather than left in a release note:
- Signing identity
- contact@edgexene.io
- Issuer
- https://accounts.google.com
Questions about any of this, or something not working? Contact us and a person will read it. We cannot recover a lost token or passphrase, but everything else is fair game.