Cybersecurity Tools
This section collects operator-facing deployment guides for specific security tools — the “how do I actually run this in production against a real adversary” kind of guide, not end-user privacy how-tos.
If you’re a user looking for which tool to pick, start at:
- Proxies (taxonomy) — anonymity networks vs VPN tunnels vs obfuscated proxies; routes you to the right tool for your threat model.
- VPN Recommendation — Mullvad, IVPN, WireGuard, multi-hop chains. The user-facing privacy angle.
- Cybersecurity Prevention — DFP, mobile hardening, MFA, secure messaging. Defensive baselines for individuals.
What lives here is the server-side, the hardening, and the supply-chain trust posture for each tool.
Available guides
Section titled “Available guides”- VLESS / Xray Deployment Guide — censorship-circumvention proxy with TLS-mimicry (REALITY). Server config, hardening checklist, when to pick Sing-box instead, governance and supply-chain caveats.
Coming or wanted
Section titled “Coming or wanted”- Sing-box deployment — independent reimplementation of VLESS/REALITY plus several other obfuscated transports. The drop-in alternative when you don’t trust Xray-core upstream.
- Shadowsocks-2022 — lighter-weight obfuscated proxy, multiple mature implementations.
- WireGuard server hardening — pairs with WireGuard in Containers which covers the kernel/container side.
If you’ve operated one of these and want to write it up, the Wanted Pages backlog tracks gaps — these entries are listed there.
What does not live here
Section titled “What does not live here”- User-facing tool picks → Proxies, VPN Recommendation, Secure Messaging.
- General hardening guidance → Cybersecurity Prevention.
- Self-hosting other infrastructure (Authentik, GitLab, etc.) → Server Guides and Infrastructure.
- Long-form research on tooling provenance → Field Notes (e.g., the VLESS Investigation series for the Xray-core governance research that doesn’t belong on a deployment guide).