Guardyn

Open source • End-to-end encrypted • Self-hostable

📱 Download • 💻 Self-Host • Why Guardyn? • Contribute

Guardyn is a private messaging app with military-grade encryption. Unlike other messengers:

• ✅ Open source — you can verify everything we claim
• ✅ Self-hostable — run your own server if you want complete control
• 🔐 End-to-end encrypted — encryption happens on your device, not on the server. Making it impossible to disable is tracked work, not yet done.
• 🚧 Post-quantum — hybrid X25519 + ML-KEM-768 is implemented in crates/crypto, but is not yet enabled end-to-end. Do not rely on it against a harvest-now-decrypt-later adversary until it is.

Early Access: We're in beta! Download from GitHub Releases and join the privacy rebellion.

Option 1: Use our hosted server (coming Q2 2026)

• Just download the app and sign up — we handle everything

Option 2: Self-host your own server

• Complete control over your data
• See Self-Host Guide below

Want to run your own Guardyn server? It's easy!

• Docker — Install Docker
• 8GB RAM minimum

# Clone the repository
git clone https://github.com/guardyn/guardyn.git
cd guardyn

# Start all services
docker compose -f docker-compose.dev.yml up -d

# Check status
docker compose -f docker-compose.dev.yml ps

That's it! 🎉 Your server is running at localhost:8080.

We provide a Justfile with all common commands:

# Install Just: cargo install just (or brew install just)

just dc-up      # Start all services
just dc-down    # Stop all services  
just dc-logs    # View logs
just dc-ps      # Check status
just dc-reset   # Reset all data

*Signal's server is mostly open source but not designed for self-hosting.

For Everyone:

• 🔐 Messages encrypted before they leave your device
• 👁️ Zero-knowledge: we can't read your messages
• 📱 Native apps for all platforms

For Organizations:

• 🏢 Self-host for complete data sovereignty
• 🔑 LDAP/SAML integration (coming v1.2)
• 📊 Compliance-ready (GDPR, HIPAA)

For Developers:

• 🛠️ 100% open source (Apache-2.0)
• ⚡ 30-second local setup
• 📚 Comprehensive documentation

• ✅ End-to-end encryption — Always on, can't be disabled
• ✅ Perfect Forward Secrecy — Past messages safe if keys compromised
• ✅ Post-Quantum Ready — Protected against quantum computers
• ✅ Metadata Protection — Sealed Sender hides sender identity
• ✅ Hardware Keys — iOS Secure Enclave, Android KeyStore

• ⚠️ If your device is compromised, encryption can't help
• ⚠️ Recipients can take screenshots
• ⚠️ ISPs see IP addresses (use Tor/VPN for anonymity)

• ✅ Internal security review completed
• ✅ Penetration testing infrastructure deployed
• 📋 External audit (Cure53) scheduled Q2 2026

• ✅ 1-on-1 and group chat (E2EE)
• ✅ Voice messages
• ✅ Message reactions, replies, edit, delete
• ✅ Disappearing messages
• ✅ Read receipts and typing indicators

• ✅ Voice and video calls (1-on-1, E2EE)
• ✅ Screen sharing (desktop)
• 📋 Group calls (coming v1.1)

• ✅ Photos, videos, files (encrypted)
• ✅ Media gallery

• ✅ iOS, Android (Flutter)
• ✅ Windows, macOS, Linux (Tauri)
• ✅ Push notifications (FCM, APNs)
• ✅ Offline support

┌────────────────────────────────────────────────────────────────┐
│                         YOUR DEVICES                            │
├────────────────────────────────────────────────────────────────┤
│  📱 Mobile (Flutter)          🖥️ Desktop (Tauri)               │
│  iOS • Android                Windows • macOS • Linux           │
└──────────────────────────┬─────────────────────────────────────┘
                           │
                    🔐 guardyn-crypto (Rust)
                    All encryption happens HERE
                    on YOUR device
                           │
                           ▼
┌────────────────────────────────────────────────────────────────┐
│                       GUARDYN SERVER                            │
│  (Can self-host or use our cloud)                               │
├────────────────────────────────────────────────────────────────┤
│  🔑 Auth        💬 Messaging      👥 Presence                   │
│  📁 Media       📞 Calls          🔔 Notifications              │
├────────────────────────────────────────────────────────────────┤
│  TiKV • ScyllaDB • Redpanda (Data Layer)                       │
└────────────────────────────────────────────────────────────────┘
                           │
                    Server CANNOT read
                    your messages! 🔒

Key Point: All encryption/decryption happens on YOUR device. The server only sees encrypted blobs.

The roadmap lives in docs/roadmap/ROADMAP.md, generated from docs/roadmap/roadmap.yaml — the machine source of truth that also drives the issue tracker. It is kept there rather than here so it cannot drift from the board.

We respect Signal — they pioneered secure messaging. Here's how we differ:

Bottom Line:

• Use Signal if you want maximum proven trust
• Use Guardyn if you need self-hosting or want 100% open source

100% Apache-2.0. No dual licensing, no "Enterprise Edition" tricks.

Self-host anywhere. Modify freely. Contribute back if you want.

See CONTRIBUTING.md for setup and the pull-request contract, and AGENTS.md for the rules every change follows — invariants, git workflow, logging law and code standards.

Guardyn is developed agent-first, so the contract is written to be machine-checkable: .claude/rules/ turns each rule into a predicate you can run against your own branch before a reviewer sees it.

• Website: guardyn.co
• GitHub: github.com/guardyn/guardyn
• Security: security@guardyn.co (vulnerabilities only)
• General: hello@guardyn.co

The Privacy Rebellion Starts Now 🛡️

Built with ❤️ by privacy advocates
Apache-2.0 • Copyright © 2025-2026 Guardyn Team