zen-desktop

KeeWeb can create password vaults or open KDBX databases produced by KeePass, KeePassXC, and compatible tools. It runs in a browser or as a desktop application on Linux, Windows, and macOS. Vaults may remain as local files or be stored through Dropbox, Google Drive, or OneDrive, and the web edition can be self-hosted for greater control over deployment.

This is the official client for the Mullvad VPN service across desktop and mobile platforms. It supports WireGuard connections and options such as multihop routing, traffic obfuscation, custom DNS, content blocking, and controlled local-network access, while split-tunneling availability varies by platform. Mullvad publishes signed builds and external audit reports for the app. A Mullvad VPN service account is required to use it as a VPN client.

ProxyBridge redirects traffic from proxy-unaware applications through HTTP or SOCKS5 proxies on Windows, macOS, and Linux, with per-process rules for proxying, direct connections, or blocking. Its GUI and CLI suit security testing, protocol analysis, and selective routing. The implementation uses platform-level interception, so supported OS versions, kernel features, and elevated permissions vary by system.

mhrv-rs runs a local HTTP and SOCKS5 proxy that forwards requests through a Google Apps Script deployed under your own account, concealing the destination from the ISP at the TLS SNI layer. Setup requires creating the relay, choosing an auth secret, installing a local certificate, and configuring the browser or system proxy. Google can still see destination sites, and Apps Script quotas or unsupported video CDNs can limit usage.