Sentinel

KeeWeb can create password vaults or open KDBX databases produced by KeePass, KeePassXC, and compatible tools. It runs in a browser or as a desktop application on Linux, Windows, and macOS. Vaults may remain as local files or be stored through Dropbox, Google Drive, or OneDrive, and the web edition can be self-hosted for greater control over deployment.

This is the official client for the Mullvad VPN service across desktop and mobile platforms. It supports WireGuard connections and options such as multihop routing, traffic obfuscation, custom DNS, content blocking, and controlled local-network access, while split-tunneling availability varies by platform. Mullvad publishes signed builds and external audit reports for the app. A Mullvad VPN service account is required to use it as a VPN client.

ProxyBridge redirects traffic from proxy-unaware applications through HTTP or SOCKS5 proxies on Windows, macOS, and Linux, with per-process rules for proxying, direct connections, or blocking. Its GUI and CLI suit security testing, protocol analysis, and selective routing. The implementation uses platform-level interception, so supported OS versions, kernel features, and elevated permissions vary by system.

Zen runs a local system proxy on Windows, macOS, and Linux to block ads, tracking scripts, malware, and other unwanted requests from browsers, desktop applications, and operating-system components. Users can inspect blocked requests and the rule that matched, then use bundled filters or add hosts files and EasyList-style lists. The first run requires installing a root certificate generated locally so HTTPS traffic can be inspected. On Linux, automatic proxy configuration is currently limited to GNOME- and KDE-based desktops.