Security
from the first line.

The idea

Most attacks work because a program is allowed to do much more than it needs. AstraOS turns this around: a new program starts with no rights at all. It may only use its own folder. Everything else – the internet, your documents – must be allowed first, and the permission can be taken back.

What protects you today

Programs stay apart ✓

Every program has its own protected memory. It cannot look into another program or change it – and not into the core of the system either.

App cells ✓

Every app runs in its own “cell” with a list of rights, for example “may use the internet”. If an app tries something it is not allowed to do, AstraOS stops it. In Settings → Security you can see how often that happened.

Closed to the outside ✓

The firewall blocks connections from the internet to your computer, unless you allow them.

Checked apps ✓

AstraOS apps come with a digital seal. Before installing, AstraOS checks it. Damaged or fake apps are refused. An app without a seal gets no rights, and you see a clear warning.

Protection against blackmail software ✓

Blackmail software (ransomware) locks your files and asks for money. In AstraOS only apps with a special right may change your documents and pictures. If a program suddenly changes many files, AstraOS stops it and brings your files back.

Virus scanner ✓

The scanner checks programs and files – when they start, when they are installed and when they are saved. It also recognises dangerous behaviour, for example a program that copies itself again and again. Its list of known threats is still small and is growing.

What comes next

• AstraOS refuses to start if its core was changed
• System files that repair themselves after an attack
• Using the extra protection built into modern processors
• Drivers, files and network as separate parts – a problem in one cannot reach the others
• Separate areas, for example for work and for private use

Attack allowed

We think a system is only as secure as the attacks it has survived. From the alpha on, anyone may test AstraOS for holes and tell us. We report holes openly and close them.

How to report a security problem

From 10 November 2026, 19:00, write to security@astraos.page. Tell us what you found, how to repeat it and which version you used. Please do not publish details before we could fix it.

We cannot promise money. We promise to read every report, to answer and to fix real problems.

Our goal

The goal is the most secure operating system – and we want to prove it by letting people attack it, not just by saying it. Until then AstraOS is a test version: please do not use it for anything important.