GrapheneOS

Security and privacy focused mobile OS with Android app compatibility. We focus on developing substantial privacy and security improvements.

Verified
We've verified that the organization GrapheneOS controls the domain:
- grapheneos.org
Learn more about verified organizations

Pinned Loading

platform_manifest platform_manifest Public

Repo manifest for the GrapheneOS mobile privacy and security hardening project.

412 130
hardened_malloc hardened_malloc Public

Hardened allocator designed for modern systems. It has integration into Android's Bionic libc and can be used externally with musl and glibc as a dynamic library for use on other Linux-based platfo…

C 1.6k 116
os-issue-tracker os-issue-tracker Public

Issue tracker for GrapheneOS Android Open Source Project hardening work. Standalone projects like Auditor, AttestationServer and hardened_malloc have their own dedicated trackers.

459 23
Auditor Auditor Public

Hardware-based attestation / intrusion detection app for Android devices. It provides both local verification with another Android device via QR codes and optional scheduled server-based verificati…

Java 588 90
platform_bionic platform_bionic Public

Hardened Android standard C library. Some of the past hardening has not yet been ported from Marshmallow, Nougat and Oreo to this Android Pie repository. Most is available via archived tags in http…

Assembly 132 39
Vanadium Vanadium Public

Privacy and security enhanced releases of Chromium for GrapheneOS. Vanadium provides the WebView and standard user-facing browser on GrapheneOS. It depends on hardening in other GrapheneOS reposito…

Shell 1.4k 83

Repositories

AttestationServer Public
attestation.app remote attestation server. Server code for use with the Auditor app: https://github.com/GrapheneOS/Auditor. It provides two services: submission of attestation data samples and a remote attestation implementation with email alerts to go along with the local implementation based on QR code scanning in the app.

GrapheneOS/AttestationServer’s past year of commit activity

Java 136 MIT 49 14 3 Updated Nov 3, 2025
infrastructure Public
Shared server infrastructure

GrapheneOS/infrastructure’s past year of commit activity

Vim Script 77 MIT 14 4 0 Updated Nov 3, 2025
grapheneos.org Public
Servers for our website, HTTP/HTTPS connectivity checks, HTTPS network time, NTP (for Qualcomm XTRA), Broadcom PSDS cache, Samsung PSDS cache, Qualcomm PSDS (XTRA) cache, SUPL proxy, attestation key provisioning proxy, Vanadium component update check/download proxy, network location proxy and geocoding proxy.

GrapheneOS/grapheneos.org’s past year of commit activity

HTML 561 MIT 166 29 25 Updated Nov 3, 2025
ns1.grapheneos.org Public
Authoritative DNS servers

GrapheneOS/ns1.grapheneos.org’s past year of commit activity

Shell 25 MIT 3 1 0 Updated Nov 2, 2025
matrix.grapheneos.org Public
Matrix and Element Web server

GrapheneOS/matrix.grapheneos.org’s past year of commit activity

Shell 17 3 0 0 Updated Nov 2, 2025
discuss.grapheneos.org Public
Discussion forum server

GrapheneOS/discuss.grapheneos.org’s past year of commit activity

Shell 16 MIT 4 1 0 Updated Nov 2, 2025
releases.grapheneos.org Public
OS update and app repository servers

GrapheneOS/releases.grapheneos.org’s past year of commit activity

Shell 88 MIT 14 0 0 Updated Nov 2, 2025
grapheneos.social Public

GrapheneOS/grapheneos.social’s past year of commit activity

Shell 15 4 0 0 Updated Nov 2, 2025
mail.grapheneos.org Public
Mail server

GrapheneOS/mail.grapheneos.org’s past year of commit activity

Shell 14 MIT 6 0 0 Updated Nov 2, 2025
PdfViewer Public
Simple Android PDF viewer based on pdf.js and content providers. The app doesn't require any permissions. The PDF stream is fed into the sandboxed WebView without giving it access to content or files. CSP is used to enforce that the JavaScript and styling properties within the WebView are entirely static.

GrapheneOS/PdfViewer’s past year of commit activity

Java 820 MIT 115 33 14 Updated Oct 31, 2025