Skip to content

Cybersecurity Tools

This section collects operator-facing deployment guides for specific security tools — the “how do I actually run this in production against a real adversary” kind of guide, not end-user privacy how-tos.

If you’re a user looking for which tool to pick, start at:

  • Proxies (taxonomy) — anonymity networks vs VPN tunnels vs obfuscated proxies; routes you to the right tool for your threat model.
  • VPN Recommendation — Mullvad, IVPN, WireGuard, multi-hop chains. The user-facing privacy angle.
  • Cybersecurity Prevention — DFP, mobile hardening, MFA, secure messaging. Defensive baselines for individuals.

What lives here is the server-side, the hardening, and the supply-chain trust posture for each tool.

  • VLESS / Xray Deployment Guide — censorship-circumvention proxy with TLS-mimicry (REALITY). Server config, hardening checklist, when to pick Sing-box instead, governance and supply-chain caveats.
  • Sing-box deployment — independent reimplementation of VLESS/REALITY plus several other obfuscated transports. The drop-in alternative when you don’t trust Xray-core upstream.
  • Shadowsocks-2022 — lighter-weight obfuscated proxy, multiple mature implementations.
  • WireGuard server hardening — pairs with WireGuard in Containers which covers the kernel/container side.

If you’ve operated one of these and want to write it up, the Wanted Pages backlog tracks gaps — these entries are listed there.