Patanyx Browser Leave less behind.
Spot PATANYX. Unlock Premium. Seven PATANYX ads are out from September 21 to October 5, 2026, in Chicago, New York City, Washington, D.C., and Danville, Pennsylvania. Photograph one, share it, and the first 100 entries get three months of Premium. Hints and how to enter. Download PATANYX Browser here. New to PATANYX? Read the quick guide. What Premium unlocks: the Premium guide.
What is PATANYX?
PATANYX is a lightweight, Rust-based desktop browser built with privacy at its core. Protection is part of the architecture from the start, not something buried behind a maze of settings.
EdgeXene designed PATANYX around transparency, local control, and verifiable protection while staying honest about what no browser can hide.
PATANYX runs on Windows and Linux and is actively under development.
What it does that others don't
Everything is built in -- nothing to install, no account to make.
Ads & Tracker Blocker Automatic Windows & Linux
Ads and trackers are stopped inside the browser itself, from first launch. One switch turns it off.
Reported Host List Automatic Windows & Linux
Phishing and malware blocking, built in from the start.
PATANYX blocks access to more than 770,000 hosts reported for phishing or malware distribution. A bundled blocklist works from first launch, without waiting for a download. As you browse, PATANYX checks about once an hour for a newer signed list.
Five sources bring different strengths: newly reported phishing domains, scam tracking and takedown work, community-maintained records, dedicated scam and malware lists, and a warning list maintained by Poland's incident response team.
Explore the sources behind the list: Where it is built from.
Page Connections Automatic Windows & Linux
Open one panel and read every other company your tab just contacted. On Windows the panel also keeps score, counting what was allowed and what was stopped; on Linux it names each host and how many requests went out. Either way, nothing your tab reaches for stays off the list.
Encrypted DNS Opt-in Windows
Every site visit begins with a lookup of the site's name, and on an ordinary connection your ISP can read that entire trail.
PATANYX can send those lookups through Quad9 using encrypted DNS, which blocks malware domains at the resolver, so protection kicks in before a page even loads.
It narrows who can read the trail rather than hiding your destinations from every observer, since the connection itself still gives clues.
Private Tunnel Opt-in Windows & Linux
Send this browser's traffic through a server you choose. Bring a WireGuard file from your own server or a provider. Nothing else on your computer is affected, and if the tunnel drops, pages stop rather than going out unprotected.
Local Network Boundary Automatic Windows
A page served over plain HTTP has no business reaching your router, your printer or anything else on your network, so it will not be allowed to. Pages you load over HTTPS are unaffected. This closes the direct route, not every trick for disguising where a page really connects, so keep your router and devices updated too.
Clean Copy On demand Windows & Linux
Right-click, Copy clean link. PATANYX unwraps the redirector and strips the tracking parameters. What lands on your clipboard is where the link actually goes.
Fingerprint Divergence Automatic Windows & Linux
The reading that identifies you on one site does not match the one another site sees, making your activity far harder to correlate across the web. PATANYX adds small site-specific noise to the canvas, audio, and graphics readouts fingerprinting scripts lean on hardest. It is noise, not invisibility: screen size, fonts, and background workers are not covered. One switch in the privacy panel turns it off. Read about it here.
Divergence Exceptions On demand
Fingerprint Divergence adds noise for every site, and a few sites break under it. Turn it off for just those, named one full hostname at a time, and leave it on everywhere else. The panel also reports what the tab in front of you actually received, which is worth knowing because a tab keeps whatever it started with: a change here reaches the next tab you open for that site.
Translation Workflow On demand Windows & Linux
A local-first page translator that keeps webpage content on your device. Models are downloaded on demand, verified, stored locally for offline use, and run through Bergamot/Marian in an isolated translation view of its own. Mozilla models provide 54 language coverages with OPUS-MT extending support for additional and historical languages.
Permission Defaults Automatic Windows
Camera, microphone, location and notifications start switched off, from the first launch. A site that wants one stays blocked until you unblock it yourself, in the privacy panel.
Forget This Site On demand Windows
Clear one site's cookies without touching anything else you are signed in to.
Strict Tab On demand Windows & Linux
Not a private window -- a stricter one. JavaScript off, blocking on, and on Windows no stored state at all, from a right-click on the link.
Fresh Session Automatic Windows & Linux
Every launch starts a new session. Sites stay signed in while the browser is open, and forget you when it closes. On Windows you can name sites the clear leaves alone. Naming any site changes how the clear works, and the privacy panel says how.
Tab Freeze On demand Windows & Linux
One click and the tab stops making network requests entirely, until you let it go again.
PATANYX Vault Automatic Windows & Linux
Your passwords and notes live in one encrypted file that never leaves your machine. When you create it, you are shown a recovery key exactly once; keep it safe, because it is the only way back in if you forget your passphrase and it can never be reissued.
The vault locks itself when you step away, adjustable or off if you prefer, with a countdown warning first, and typing anywhere counts as presence so it never locks mid-work. On Windows, locking your workstation locks the vault with it.
Bookmark Manager On demand Windows & Linux
Bookmarks get folders you make yourself, a pinned Quick Access row that stays put whatever you search for, and an import that reads the file your old browser exports. They are encrypted on your computer and open with your vault, so a saved page is not a list anyone can read off your disk.
Bookmark Search On demand Windows & Linux
Bookmark search in the Library that ranks the closest match first, even with letters missing.
Page Snapshot On demand Windows & Linux
Bookmark a page, then snapshot it as it was served to you, and the Integrity button tells you later whether the site quietly changed it. A fingerprint is stored, not a copy; it lives with the bookmark, and deleting the bookmark deletes it.
Anti-Impersonation Automatic Windows & Linux
Some letters from other alphabets look identical to ours, so a scam site can spell your bank's name perfectly. PATANYX never prettifies an address: a domain built from look-alike letters is shown in its raw form, and the disguise falls apart.
Theme Packs On demand Windows & Linux
Nine accent colors and three chrome color schemes, all free, and the toolbar can sit above the page or down the left edge. The accent frames the whole window and tints the tab strip, toolbar and address bar; on Windows 11 the title bar and window border wear it too. Pages keep their own colors. On Windows the scrollbars of the pages you open follow the accent as well, and a page can read that color, so the accent you choose is something a site can tell.
Quaryn: built for safer systems. Building Premium Separate build PATANYX Nabu-X
Quaryn is a programming language being developed by EdgeXene around deterministic memory, compile-time safety, and readable systems programming. It remains under active development and is not yet intended for general use.
Looking ahead, EdgeXene is exploring the potential use of Quaryn for certain browser automation capabilities within PATANYX Nabu-X. This remains an area of research and development.
Trusted Pair: Talk privately. Verify together. Building Premium Windows & Linux Separate build Not in this release
Private Chat · Page Corroboration
A pair of features for two people who already trust each other. You will be able to talk one to one over an end-to-end encrypted channel, reached through a number you exchange directly rather than a public directory, and then use that same private connection to compare what the web showed each of you. Page Corroboration will let you check whether the page in front of you matches the page the other person received, so that when a site shows two people something different, the difference becomes visible. Both arrive in PATANYX Nabu-X, a separate build from the browser described on this page, and neither is in a published release yet.
PATANYX occasionally points to a product from another company when it answers something PATANYX does not solve in the same way. Those recommendations come from the feature you opened, never from a profile built about you, and nothing is sent to a partner unless you choose to click.
The Partnerships page sets out who those partners are, how PATANYX may earn a commission, and which parts of the browser are not for sale at any price.
The quick guide walks through six things that work a little differently from the browser you came from, with screenshots along the way.
Ranked #1 Product of the Day on PeerPush, September 18,
2026.
Follow us and leave a review.
Find us on AlternativeTo.
Earned the OpenSSF Best Practices passing badge,
September 23, 2026.
Longer reads and news from PATANYX.
PATANYX vs your browser
Comparison based on each browser's default settings upon first use.
| PATANYX | Chrome | Edge | Firefox | Brave | Opera | Vivaldi | |
|---|---|---|---|---|---|---|---|
| Privacy StanceWhat it refuses without being asked | |||||||
| Third-party cookies are refused by default | |||||||
| Blocks ads and trackers from first launch, no extension | |||||||
| Network TransparencyWhat you can see and choose about where traffic goes | |||||||
| Shows every host a page contacted Allowed/blocked split: Windows | |||||||
| More than one independent phishing-list source | |||||||
| Encrypted DNS that never silently falls back Windows | |||||||
| Local Data CustodyWhat stays on your machine | |||||||
| Built-in password vault | |||||||
| On-device scan for personal info in a photo Premium | |||||||
| Web NavigationWhether it works like a browser should | |||||||
| Ordinary sites and video play without tweaking | |||||||
| Warns if a saved page quietly changed Linux | |||||||
What it is built from
One Rust program. It reaches us on its own for three signed things: an hourly blocklist refresh, a background update when one exists, and an engine-safety advisory alongside that same check. Downloading an update tells our server which version you are upgrading from. PATANYX sends us no browsing history, no search terms, no usage analytics and no crash reports. A few other requests are worth naming. A language pack arrives only when you ask for one, and tells the host we run which language pair you chose. If you buy Premium, activating a device sends your token and that device's random number to the same host as the checks above: once when you paste the token, repeated once straight away if it cannot connect and is not going through your own tunnel, and once more at each unlock until it succeeds. And if you have chosen an encrypted resolver, an occasional unsigned probe checks that resolver is reachable; that one goes to them, not to us. Started without a page, it opens PATANYX Search at patanyx.com, which we run and which keeps no log of that page or what it loads. Web pages are displayed by software your computer already has and keeps up to date on its own. One caveat: on Windows, Microsoft's WebView2 engine reports a minimum of component health data that no application is allowed to switch off.
| Layer | Component | License |
|---|---|---|
| Language | Rust 1.98, pinned for reproducible builds | Apache-2.0/MIT |
| Windowing | tao + wry, one chrome webview and one webview per tab | Apache-2.0/MIT |
| Web engine | WebKitGTK on Linux, Microsoft WebView2 on Windows | supplied by the OS |
| Encrypted DNS | DNS-over-HTTPS to Quad9, opt-in, Windows only | third-party service |
| Vault crypto | Argon2id key derivation + XChaCha20-Poly1305 encryption | MIT/Apache-2.0 |
| Page comparison | SHA-256 digest ladder: bytes, structure, then visible text | MIT/Apache-2.0 |
| Signed updates | Ed25519 signature verification, key compiled into the binary | BSD-3 |
| On-device OCR | tract (pure-Rust ONNX inference) + PP-OCR models, shared with XLiteOCR | MIT/Apache-2.0 |
| Blocklist data | phishunt.io for the fresh edge, PhishDestroy for depth, Phishing.Database for the bulk, and ShadowWhisperer's scam and malware lists, plus phishunt sightings retained up to 30 days for as long as they still resolve. Merged, checked hourly and republished when it changes. The list also carries the Dangerous Websites Warning List, used by written permission; the data comes from CERT Polska | MIT / CC0 / Unlicense / by permission of CERT Polska |
| Chat transport | X25519 key exchange, rustls, local network discovery | MIT/Apache-2.0 |
License
PATANYX Browser is licensed under the Apache License 2.0. Every build ships with a NOTICE file and a full inventory of all third-party crates, every one under a permissive license, so there are no copyleft obligations and no surprises. That license lets anyone read, build and audit every line of it.
What it cannot hidethe limits, in plain words
What it cannot hide
It cannot hide that you connected to something.
Every request has to be routed somewhere, and that destination, the numeric address of the machine you reached, is the one thing encryption cannot cover. Hiding a site's name (in lookups, and inside the connection where sites support it) still leaves the number, and the number often identifies the site by itself. Whoever carries your traffic sees that list, when you contacted each address, and roughly how much data moved.
What is covered.
On an HTTPS site the rest is encrypted: the part of the address after the domain, the contents of the page, anything you type into it, your passwords and your cookies. Encrypted DNS stops your provider being handed a readable list of every site you look up, and on Windows the site name is hidden inside the connection too -- measured, not assumed, though only where a site supports it.
Signing you out is not erasing.
A new session cannot use the last one's cookies, but they do sit on disk in between. Against someone holding your machine, the vault is the answer, not this.
It is not an anonymity tool.
There is no onion routing and no defense against someone watching traffic patterns. The built-in tunnel moves what your local network sees to a server you picked. It changes who can watch, not whether anyone can. If you need nobody in the path to know which server you reached, use Tor.
Anti-fingerprinting is noise, not invisibility.
PATANYX adds small site-specific noise to the canvas, audio, and graphics readouts fingerprinting scripts lean on hardest, so the reading that identifies you on one site does not match the one another site sees. Screen size, fonts, and plenty of other details still read out exactly as they are, and code running in a worker is not covered. PATANYX does not try to make you look like everyone else; it tries to keep one site's picture of you from matching another's.
Check that your download came from EdgeXeneverify the signature yourself
Check that your download came from EdgeXene
Every released binary is signed with Sigstore, and the signature is recorded in a public, append-only log. That lets you confirm the file was published by EdgeXene and that not one byte has changed since. It is not a safety rating, and nobody has vetted the software on your behalf.
cosign verify-blob PATANYX.exe \ --bundle PATANYX.exe.sigstore.json \ --certificate-identity=contact@edgexene.io \ --certificate-oidc-issuer=https://accounts.google.com
On Linux the file is named PATANYX and its bundle
PATANYX.sigstore.json; the command is otherwise
identical.
It should print Verified OK. Anything else means do not run the file. Both values below are required, so they are stated plainly rather than left in a release note:
- Signing identity
- contact@edgexene.io
- Issuer
- https://accounts.google.com
Questions about any of this, or something not working? Contact us and a person will read it. We cannot recover a lost token or passphrase, but everything else is fair game.