Patanyx Browser Leave less behind.

Prerelease

The first public build of PATANYX is out, for Windows and Linux, and it introduces PATANYX's Fingerprint Divergence: different sites see different fingerprintable signals, reducing their ability to correlate your activity across the web. Download it here.

The PATANYX toolbar, both rows: the address bar with bookmark, quarantine and About controls, and beneath it Privacy, Theme, Live, TA, Vault, DNS, Tunnel, Library, Integrity and Updates

What is PATANYX?

PATANYX is a lightweight, Rust-based desktop browser built with privacy at its core. Protection is part of the architecture from the start, not something buried behind a maze of settings.

EdgeXene designed PATANYX around transparency, local control, and verifiable protection while staying honest about what no browser can hide.

PATANYX runs on Windows and Linux and is actively under development.

What it does that others don't

Everything is built in -- nothing to install, no account to make.

01 Privacy Stance

Ad and tracker blocking Automatic Windows & Linux

Ads and trackers are stopped inside the browser itself, from first launch. One switch turns it off.

Sites reported as phishing, refused on sight Automatic Windows & Linux

Over 550,000 hosts reported as phishing are refused from first launch, before the browser makes a single network connection.

Three sources build it. Phishunt supplies the fresh edge: its pipeline watches Certificate Transparency logs as new domains are issued, alongside several threat-intelligence feeds, and most of what it reports has not reached the other two yet. It lists only what is live at that moment and drops the rest, so PATANYX keeps what it saw there for 30 days after it leaves that feed, and only for as long as the domain still resolves. PhishDestroy adds the depth: over 180,000 scam domains it tracks and works to have taken down, almost none of them carried by the other two. Phishing.Database supplies the bulk, a community-maintained record of confirmed phishing domains and an official data vendor for VirusTotal.

See who a page talks to Automatic Windows & Linux

Open one panel and read every other company your tab just contacted. On Windows it also counts what was allowed and what was stopped; on Linux the engine does not report per-request matches, so the panel lists the hosts and says how many were requested.

Encrypted DNS Opt-in Windows

Before your browser can open a website, it normally has to ask where that site lives. On a typical connection, those DNS requests may be visible to your Internet provider -- creating a readable trail of the domains you look up.

PATANYX lets you route those requests through Mullvad or Quad9 using encrypted DNS, so your ISP can no longer directly read the domain names contained in those DNS lookups.

It doesn't make you invisible, destination IP addresses and other network metadata can still reveal clues about where you're connecting, but it removes one of the clearest sources of browsing-history exposure from the network.

Private Tunnel Opt-in Windows & Linux

Send this browser's traffic through a server you choose. Bring a WireGuard file from your own server or a provider. Nothing else on your computer is affected, and if the tunnel drops, pages stop rather than going out unprotected.

Keep pages off your local network Automatic Windows

A page served over plain HTTP has no business reaching your router, your printer or anything else on your network, so it will not be allowed to. Pages you load over HTTPS are unaffected. This blocks the direct route; it cannot catch every trick that hides where a page is really connecting, so keep your router and devices updated too.

Copy the link, not the tracking On demand Windows & Linux

Right-click, Copy clean link. PATANYX unwraps the redirector and strips the tracking parameters. What lands on your clipboard is where the link actually goes.

02 Session Control

Permissions start switched off Automatic Windows

Camera, microphone, location and notifications start switched off, from the first launch. A site that wants one stays blocked until you unblock it yourself, in the privacy panel.

Forget this site On demand Windows

Clear one site's cookies without touching anything else you are signed in to.

Right-click into quarantine On demand Windows & Linux

Not a private window -- a stricter one. JavaScript off, blocking on, and no stored state at all, from a right-click on the link.

Closing the browser signs you out Automatic Windows & Linux

Every launch starts a new session. Sites stay signed in while the browser is open, and forget you when it closes.

Freeze a tab On demand Windows & Linux

One click and the tab stops making network requests entirely, until you let it go again.

03 Local Data Custody

A vault for passwords and notes Automatic Windows & Linux

Credentials and private notes in one encrypted file that never leaves your machine. A recovery key is issued when you create the vault and shown once; it is the only way in if you forget the passphrase. Keep it somewhere safe: a recovery key that is lost cannot be reissued. If your vault has no recovery key at all, the Backup tab will make you one.

It locks itself after five minutes with nothing happening. Typing anywhere in the browser counts, so it will not lock while you are working. With a minute to go you get a countdown and a button that says I'm still here. You can change five minutes to 15, 30 or 60, or switch the whole thing off. On Windows, locking your workstation or letting it sleep also locks the vault.

Fill a saved password On demand Windows

A key lights up in the toolbar only when this site has a saved password, so its absence tells you as much as its presence. Sign in on one part of a site and it fills on the rest -- which part of a site counts as the same site is decided by the public suffix list, not by matching text, so a password saved on your bank is never offered to a stranger who happens to share an ending.

Bookmark Manager On demand Windows & Linux

Bookmarks get folders you make yourself, a pinned Quick Access row that stays put whatever you search for, and an import that reads the file your old browser exports. They are encrypted on your computer and open with your vault, so a saved page is not a list anyone can read off your disk.

A toolbar you arrange Opt-in Windows & Linux

Choose whether toolbar buttons show their names or just their icons. The setting is kept in a plain file on your computer and nothing about it leaves the device.

04 Page Integrity

Save a page as PDF On demand Windows

Every browser prints to PDF. This one writes a record of the address it came from alongside it, so the file can still answer where it came from months later.

Catch a page that changed On demand Linux

Bookmark a page, then snapshot it as it was served to you, and the Integrity button tells you later whether the site quietly changed it. A fingerprint is stored, not a copy; it lives with the bookmark, and deleting the bookmark deletes it.

Anti-Impersonation Automatic Windows & Linux

Some letters from other alphabets look identical to ours, so a scam site can spell your bank's name perfectly. PATANYX never prettifies an address: a domain built from look-alike letters is shown in its raw form, and the disguise falls apart.

05 Work in progress

Getting Premium ready Building Windows & Linux

Everything behind the paid tier is being wired up: licenses, checkout, and the features they unlock. Launching soon. Nothing is for sale yet.

Multi-Tab Search Building Premium Windows & Linux

One search across every open tab. Matching text appears in context, grouped by tab; pick a match to jump to its tab with the search ready to step through. The search runs on your device and the query never leaves it. Quarantine tabs are never searched, and PATANYX reads each page as the server sent it, so text a page builds after loading is not included.

Tab Switcher Building Premium Windows & Linux

Jump to any open tab by typing part of its title or address. The closest match ranks first, even with letters missing.

Batch Tab Actions Building Premium Windows & Linux

Select several tabs at once, then close, bookmark, or set them aside together.

Smarter Bookmark Search Building Windows & Linux

Bookmark search in the Library that ranks the closest match first, even with letters missing.

06 Premium
Coming soon

PATANYX Premium is on the way! Get ready for exclusive power-user features coming soon. Don't worry, all free features stay free forever. Check back here for launch details and feature reveals.

While Premium is still in development, Fingerprint Divergence, theme packs, and the photo check stay switched on for everyone in the ordinary build. The tab pack is the one surface that already asks for a licence: it was never free, and it unlocks when Premium launches. Private chat and page corroboration are not in the ordinary build at all: they are compiled into a separate PATANYX-Premium build.

While preparing to launch, this is PATANYX's planned pricing

Monthly $5 per month
3 months $13.50 $4.50 / month Save 10%
6 months $25.50 $4.25 / month Save 15%
1 year $48 $4.00 / month Save 20%

Fingerprint Divergence Automatic Windows & Linux

PATANYX gives different sites different fingerprintable signals, reducing their ability to correlate your activity across the web. The canvas, audio, and graphics readouts fingerprinting scripts lean on hardest get small site-specific noise, so the reading that identifies you on one site does not match the one another site sees. The audio noise varies across the recording and is derived from what a site actually measures, so it does not cancel out and cannot be worked out by taking two readings. Element measurements carry sub-pixel noise, and the protection reaches ordinary background workers, where a growing share of fingerprinting runs. It is noise, not invisibility: screen size, fonts, and several kinds of worker are not covered. One switch in the privacy panel turns it off. Read about it here.

Private chat On demand Invite only Windows & Linux

End-to-end encrypted, one to one. People are reached by a hash number they hand you directly, and there is no directory to appear in.

Check a page with a contact On demand Separate build Linux

Corroboration: ask a contact whether the page they were served is the page you were served. A site that shows one visitor something it shows nobody else has to do it in the open, because a second pair of eyes can compare bytes with you.

It extends the Integrity button and travels over the same private channel as chat, so nothing about the page or the question reaches us. This works on Linux today; the Windows half has landed and is being tested before it ships.

Check a photo before you send it On demand Windows & Linux

Upload an image and it reads the text inside, flagging e-mail addresses, card numbers and keys you may not have noticed. It also finds text that is too faint to see, like white on white, and shows you what it says. That part is a Rust port of XLiteOCR, EdgeXene's open-source OCR engine. It runs on your machine; the image never leaves it.

Theme packs On demand Windows & Linux

Accent colours for the browser's own toolbar and panels, the paid extra. Following your system's light or dark setting is free for everyone, and pages are never restyled.

PATANYX vs your browser

Comparison based on each browser's default settings upon first use.

PATANYX Chrome Edge Firefox Brave Opera Vivaldi
Privacy StanceWhat it refuses without being asked
Third-party cookies are refused by default
Blocks ads and trackers from first launch, no extension
Network TransparencyWhat you can see and choose about where traffic goes
Shows every host a page contacted Allowed/blocked split: Windows
More than one independent phishing-list source
Encrypted DNS that never silently falls back Windows
Local Data CustodyWhat stays on your machine
Built-in password vault
On-device scan for personal info in a photo Premium
Web NavigationWhether it works like a browser should
Ordinary sites and video play without tweaking
Warns if a saved page quietly changed Linux
Included Limited or partial None

What it is built from

One Rust program, no runtime downloads. PATANYX sends us no browsing history, no search terms, no usage analytics and no crash reports. Its only self-initiated network activity is an anonymous, signed check for updates and blocklist refreshes -- plus, if you have chosen an encrypted resolver, an occasional check that the resolver is still reachable. Web pages are displayed by software your computer already has and keeps up to date on its own. One caveat: on Windows, Microsoft's WebView2 engine reports a minimum of component health data that no application is allowed to switch off.

Layer Component License
Language Rust 1.96, pinned for reproducible builds Apache-2.0/MIT
Windowing tao + wry, one chrome webview and one webview per tab Apache-2.0/MIT
Web engine WebKitGTK on Linux, Microsoft WebView2 on Windows supplied by the OS
Encrypted DNS DNS-over-HTTPS to Mullvad or Quad9, opt-in, Windows only third-party service
Vault crypto Argon2id key derivation + XChaCha20-Poly1305 encryption MIT/Apache-2.0
Page comparison SHA-256 digest ladder: bytes, structure, then visible text MIT/Apache-2.0
Signed updates Ed25519 signature verification, key compiled into the binary BSD-3
On-device OCR tract (pure-Rust ONNX inference) + PP-OCR models, shared with XLiteOCR MIT/Apache-2.0
Blocklist data phishunt.io for the fresh edge, PhishDestroy for depth and Phishing.Database for the bulk, plus phishunt sightings retained up to 30 days for as long as they still resolve. Merged, checked hourly and republished when it changes MIT / CC0
Chat transport X25519 key exchange, rustls, local network discovery MIT/Apache-2.0

License

PATANYX Browser is licensed under the Apache License 2.0. Every build ships with a NOTICE file and a full inventory of all third-party crates, every one under a permissive license, so there are no copyleft obligations and no surprises. That license lets anyone read, build and audit every line of it.

github.com/EdgeXene/patanyx Read the source on GitHub, where the prerelease builds are published too.
What it cannot hidethe limits, in plain words

What it cannot hide

It cannot hide that you connected to something.

Every request has to be routed somewhere, and that destination, the numeric address of the machine you reached, is the one thing encryption cannot cover. Hiding a site's name (in lookups, and inside the connection where sites support it) still leaves the number, and the number often identifies the site by itself. Whoever carries your traffic sees that list, when you contacted each address, and roughly how much data moved.

What is covered.

On an HTTPS site the rest is encrypted: the part of the address after the domain, the contents of the page, anything you type into it, your passwords and your cookies. Encrypted DNS stops your provider being handed a readable list of every site you look up, and on Windows the site name is hidden inside the connection too -- measured, not assumed, though only where a site supports it.

Signing you out is not erasing.

A new session cannot use the last one's cookies, but they do sit on disk in between. Against someone holding your machine, the vault is the answer, not this.

It is not an anonymity tool.

There is no onion routing and no defense against someone watching traffic patterns. The built-in tunnel moves what your local network sees to a server you picked. It changes who can watch, not whether anyone can. If you need nobody in the path to know which server you reached, use Tor.

Anti-fingerprinting is noise, not invisibility.

PATANYX adds small site-specific noise to the canvas, audio, and graphics readouts fingerprinting scripts lean on hardest, so the reading that identifies you on one site does not match the one another site sees. Screen size, fonts, and plenty of other details still read out exactly as they are, and code running in a worker is not covered. PATANYX does not try to make you look like everyone else; it tries to keep one site's picture of you from matching another's.

A terminal listing destination IP addresses and their reverse-DNS names, mostly cloud and CDN providers
The addresses one browsing session actually reached. This is what stays visible to the network whichever browser you use.
Check that your download came from EdgeXeneverify the signature yourself

Check that your download came from EdgeXene

Every released binary is signed with Sigstore, and the signature is recorded in a public, append-only log. That lets you confirm the file was published by EdgeXene and that not one byte has changed since. It is not a safety rating, and nobody has vetted the software on your behalf.

cosign verify-blob PATANYX.exe \
  --bundle PATANYX.exe.sigstore.json \
  --certificate-identity=contact@edgexene.io \
  --certificate-oidc-issuer=https://accounts.google.com

On Linux the file is named PATANYX and its bundle PATANYX.sigstore.json; the command is otherwise identical.

It should print Verified OK. Anything else means do not run the file. Both values below are required, so they are stated plainly rather than left in a release note:

Signing identity
contact@edgexene.io
Issuer
https://accounts.google.com

Questions about any of this, or something not working? Contact us and a person will read it. We cannot recover a lost token or passphrase, but everything else is fair game.