PATANYX Browser
Leave less behind.
Everything is built in: no extensions to install, no account to make.
What is PATANYX?
PATANYX is a lightweight, Rust-based desktop browser built with privacy at its core. Protection is part of the architecture from the start, not something buried behind a maze of settings.
EdgeXene designed PATANYX around transparency, local control, and verifiable protection while staying honest about what no browser can hide.
PATANYX runs on Windows and Linux and is actively under development.
What it does that others don't
Everything is built in: no extensions to install, no account to make.
Select a frame to read it in full.
- Automatic works from first launch
- Opt-in off until you switch it on
- On demand a tool you reach for
Privacy Stance
10 framesSession Control
6 framesLocal Data Custody
3 framesPage Integrity
2 framesAppearance
2 framesReading and Tabs
3 framesOther browsers have their own versions of these three. Each one has a short video built into PATANYX: in the browser, open the Menu, choose About PATANYX, then Watch the feature videos. The quick guide has the same recordings.
Work in progress
4 framesThese features are being built now and are not in a published release yet. Some may be familiar from other browsers; this list shows what's in progress for PATANYX, not what PATANYX alone can do.
PATANYX vs your browser
Comparison based on each browser's default settings upon first use.
| Feature | PATANYX | Chrome | Edge | Firefox | Brave | Opera | Vivaldi |
|---|---|---|---|---|---|---|---|
| Privacy Stance What it refuses without being asked | |||||||
| Third-party cookies are refused by default | |||||||
| Blocks ads and trackers from first launch, no extension | |||||||
| Network Transparency What you can see and choose about where traffic goes | |||||||
| Shows every host a page contacted Allowed/blocked split: Windows | |||||||
| More than one independent phishing-list source | |||||||
| Encrypted DNS that never silently falls back Windows | |||||||
| Local Data Custody What stays on your machine | |||||||
| Built-in password vault | |||||||
| On-device scan for personal info in a photo Premium | |||||||
| Web Navigation Whether it works like a browser should | |||||||
| Ordinary sites and video play without tweaking | |||||||
| Warns if a saved page quietly changed | |||||||
Seen on
USA News: "PATANYX Ecosystem Redefines Private Browsing," October 9, 2026.
Ranked #1 Product of the Day on PeerPush, September 18, 2026.
Follow us and leave a review.
Find us on AlternativeTo.
Earned the OpenSSF Best Practices passing badge, September 23, 2026.
- Woman's WeekInside PATANYX: An Independent Approach to Browsing and SearchOctober 9, 2026
- International Business JournalFrom Business Systems to Software: Faye Tomines Builds EdgeXeneOctober 9, 2026
- KrispiTechInside PATANYX Browser's Privacy Approach: No Account, No Extensions, No CompromiseOctober 7, 2026
Further reading
Partnerships
PATANYX occasionally points to a product from another company when it answers something PATANYX does not solve in the same way. Those recommendations come from the feature you opened, never from a profile built about you, and nothing is sent to a partner unless you choose to click.
The Partnerships page sets out who those partners are, how PATANYX may earn a commission, and which parts of the browser are not for sale at any price.
Quick guide
The quick guide walks through what works a little differently from the browser you came from, with screenshots and short videos along the way.
Articles & Announcements
Longer reads and news from PATANYX.
What it is built from
One Rust program. On its own it reaches us for three signed things: an update check with an engine-safety advisory alongside it, the update itself when one exists, and a blocklist check about once an hour. Downloading an update tells our server which version you are upgrading from. On Linux, the address an update check asks for also shows whether your copy is 1.0.6 or later. PATANYX sends us no browsing history, no search terms and no crash reports. Beyond two marks every copy sends to our own websites, that a request came from PATANYX and whether it is the launch page, it reports nothing about how you use it.
A few other requests are worth naming. A language pack arrives only when you ask for one, and tells the host we run which language pair you chose. If you buy Premium, activating a device sends your token and that device's random number to the same host as the checks above: once when you paste the token, repeated once straight away if it cannot connect and is not going through your own tunnel, and once more at each unlock until it succeeds. And if you have chosen an encrypted resolver, an occasional unsigned probe checks that resolver is reachable; that one goes to them, not to us.
Started without a page, it opens PATANYX Search at patanyx.com, which we run. That launch leaves no record of your address on our side; its visit record keeps the time and an approximate place instead. Web pages are displayed by software your computer already has, and its security fixes come from your system's own updates, not from PATANYX. One caveat: on Windows, Microsoft's WebView2 engine reports a minimum of component health data that no application is allowed to switch off.
| Layer | Component | License |
|---|---|---|
| Language | Rust 1.98, pinned for reproducible builds | Apache-2.0/MIT |
| Windowing | tao + wry, one chrome webview and one webview per tab | Apache-2.0/MIT |
| Web engine | WebKitGTK on Linux, Microsoft WebView2 on Windows | supplied by the OS |
| Encrypted DNS | DNS-over-HTTPS to Quad9, opt-in, Windows only | third-party service |
| Vault crypto | Argon2id key derivation + XChaCha20-Poly1305 encryption | MIT/Apache-2.0 |
| Page comparison | SHA-256 digest ladder: bytes, structure, then visible text | MIT/Apache-2.0 |
| Signed updates | Ed25519 signature verification, key compiled into the binary | BSD-3 |
| On-device OCR | tract (pure-Rust ONNX inference) + PP-OCR models, shared with XLiteOCR | MIT/Apache-2.0 |
| Blocklist data | phishunt.io for the fresh edge, PhishDestroy for depth, Phishing.Database for the bulk, and ShadowWhisperer's scam and malware lists, plus phishunt sightings retained up to 30 days for as long as they still resolve. Merged, checked hourly and republished when it changes. The list also carries the Dangerous Websites Warning List, used by written permission; the data comes from CERT Polska | MIT / CC0 / Unlicense / by permission of CERT Polska |
| Chat transport | X25519 key exchange, rustls, local network discovery | MIT/Apache-2.0 |
License
PATANYX Browser is licensed under the Apache License 2.0. Every build ships with a NOTICE file and a full inventory of all third-party crates, every one under a permissive license, so there are no copyleft obligations and no surprises. That license lets anyone read, build and audit every line of it.
github.com/EdgeXene/patanyxRead the source on GitHub, where the release builds are published too.What it cannot hidethe limits, in plain words
What it cannot hide
It cannot hide that you connected to something.
Every request has to be routed somewhere, and that destination, the numeric address of the machine you reached, is the one thing encryption cannot cover. Hiding a site's name (in lookups, and inside the connection where sites support it) still leaves the number, and the number often identifies the site by itself. Whoever carries your traffic sees that list, when you contacted each address, and roughly how much data moved.
What is covered.
On an HTTPS site the rest is encrypted: the part of the address after the domain, the contents of the page, anything you type into it, your passwords and your cookies. Encrypted DNS stops your provider being handed a readable list of every site you look up, and on Windows the site name is hidden inside the connection too: measured, not assumed, though only where a site supports it.
Signing you out is not erasing.
A new session cannot use the last one's cookies, apart from those of sites you keep on Windows, and the rest still sit on disk until the next launch clears them. Against someone holding your machine, the vault is the answer, not this.
It is not an anonymity tool.
There is no onion routing and no defense against someone watching traffic patterns. The built-in tunnel moves what your local network sees to a server you picked. It changes who can watch, not whether anyone can. If you need nobody in the path to know which server you reached, use Tor.
Anti-fingerprinting is noise, not invisibility.
PATANYX adds small site-specific noise to the canvas, audio, and graphics readouts fingerprinting scripts lean on hardest, so the reading that identifies you on one site does not match the one another site sees. Screen size, fonts, and plenty of other details still read out exactly as they are, and code running in a worker is not covered. PATANYX does not try to make you look like everyone else; it tries to keep one site's picture of you from matching another's.
Check that your download came from EdgeXeneverify the signature yourself
Check that your download came from EdgeXene
Every released binary is signed with Sigstore, and the signature is recorded in a public, append-only log. That lets you confirm the file was published by EdgeXene and that not one byte has changed since. It is not a safety rating, and nobody has vetted the software on your behalf.
cosign verify-blob PATANYX.exe \ --bundle PATANYX.exe.sigstore.json \ --certificate-identity=contact@edgexene.io \ --certificate-oidc-issuer=https://accounts.google.com
On Linux the file is named PATANYX and its bundle PATANYX.sigstore.json; the command is otherwise identical.
It should print Verified OK. Anything else means do not run the file. Both values below are required, so they are stated plainly rather than left in a release note:
- Signing identity
- contact@edgexene.io
- Issuer
- https://accounts.google.com
