Qubes OS

Operating system using Xen to isolate activities in separate VMs, with 4.3.1 stable and 4.2 end-of-life.

qubes-os.org

Zero KYC
US
Evidence and facts →

Operating system using Xen to isolate activities in separate VMs, with 4.3.1 stable and 4.2 end-of-life.

Common usePrivacy OSPrivacy OSOperator dataNone hosted

Identity checksZero KYCNo document check recorded · identity exposure level 0/4

Evidence and riskPartial evidenceStandardSome material claims still need confirmation.; no material risk recorded in them.

Last reviewedReviewed 5 Jul 2026KYC checked 13 Mar 2026 · inferred jurisdiction · Source → older source, not independently verifiedHow to cite this pageSource coveragePartial evidenceRecorded riskStandard

Evidence and facts

CUNICULA SCORE 4.0

41/100Limited evidencePrivacy 12/25 · Control 0/20 · Transparency 0/20 · Security 25/25 · Accountability 4/10 · Cap 69 · Method

JURISDICTIONUS

NOTESecurity depends on compartmentalization plus prompt updates and required restarts. QSB-116 states that multiple Xen issues could allow a malicious qube to compromise Qubes OS or leak data; patched Xen packages are identified for Qubes 4.3.

AUDITED BYNo audit listed

OPERATOR DATANone hosted

SOURCE COVERAGE

Partial evidenceReviewed 5 Jul 2026 · Source → older source, not independently verified

LAST CHECKED2026-06-23

LAST UPDATED2026-03-13

Specs

DOCUMENT CHECKNone recorded

IDENTITY EXPOSURELevel 0/4

KYC TRIGGERSAdvertises No-KYC, but strictly adhere to OPSEC rules. Access via Tor, pay with XMR.

FEEFree

NETWORKSFOSS

CATEGORIESPrivacy OS

TORNot listed

REGIONSGlobal availability

Review analysis, source material, related services, and history

Analysis

OVERVIEW

Qubes OS uses Xen virtualization to isolate different tasks into separate VMs, with the current stable release at 4.3.1 while 4.2 has reached end-of-life.

LIMITS

The Qubes OS Foundation has received about $570,000 in Open Technology Fund (US State Department/USAGM) funding plus a $100,000 USDT grant from Tether/Bitfinex, funding sources the record also associates with Briar, Tor and Signal.

USEFUL FOR

Suited to users who want VM-level compartmentalization of computing tasks and accept a foundation that discloses US government-linked funding.

Sources · reviewed 2026-07-16

Official site ↗

Frequently Asked Questions

Is identity verification required?

No identity verification is recorded for typical use. Advertises No-KYC, but strictly adhere to OPSEC rules. Access via Tor, pay with XMR.

Which payment methods are accepted?

Accepted payment methods: FOSS.

Where is it available?

Recorded availability: GLOBAL.

Is the operator based in a Five Eyes country?

Yes. The recorded jurisdiction is US, a Five Eyes country (US, UK, CA, AU, NZ). This is jurisdiction context and does not by itself establish that a service is safer or less safe.

How are identity, operator, and evidence fields reported?

Identity exposure is level 0 of 4. No hosted operator data is recorded. Jurisdiction is shown as context, not a safety verdict. Source coverage is partial evidence, last reviewed 2026-07-05, and recorded risk is standard.

Which payment networks are supported?

Accepted networks: FOSS.

Related Services

DivestOSdivested.devdivested.dev · Privacy Tools · US

Discontinued hardened Android fork.

Cunicula score68/100Source coverageCurrent Zero KYCHigh risk

About Visit ↗

Unified Attestationuattest.netuattest.net · Privacy Tools · DE

Open-source Android integrity tokens.

Cunicula score45/100Source coverageCurrent Zero KYC

About Visit ↗

Sources and history

Terms and privacy policy

No changes to the document we watch since we started checking on 9 Aug 2026. Last checked 9 Aug 2026.

Service history

Latest meaningful changes to the facts shown on this provider page.

26 Aug 2026
Apply full-service rereview and score 4.0
Privacy warning, Score assessment
9 Aug 2026
Corporate registry information updated
Corporate / Entity type
8 Aug 2026
Corporate registry information updated
Corporate

Full service history

27 Aug 2026updated
Reconcile score 4.0 evidence
Score assessment / Control model
local-self-custodyunknown
Score assessment / Operator data exposure
noneunknown
Score assessment / Source model
closedunknown
Score review
not setOutcome: HOLD; Checked at: 2026-08-25; Inputs: Operator data exposure: unknown; Control model: unknown; Source model: unknown; Audit: Score eligible: no; Reason: No dated, scoped, current audit citation was normalized in the reviewed packet; legacy auditedBy labels receive no score credit.
Review source: older source, not independently verified · public history entry
26 Aug 2026updated
Apply full-service rereview and score 4.0
Privacy warning
not setSecurity depends on compartmentalization plus prompt updates and required restarts. QSB-116 states that multiple Xen issues could allow a malicious qube to compromise Qubes OS or leak data; patched Xen packages are identified for Qubes 4.3.
Score assessment
not setOperator data exposure: none; Control model: local-self-custody; Source model: closed
Review source: older source, not independently verified · public history entry
9 Aug 2026updated
Corporate registry information updated
Corporate / Entity type
not setunresolved
Review source: older source, not independently verified · public history entry
8 Aug 2026updated
Corporate registry information updated
Corporate
not setOfficers: none; Prior entities: none
Review source: older source, not independently verified · public history entry
8 Aug 2026updated
Provider summary rewritten
Description
A reasonably secure operating system using Xen to isolate different parts of your computing life in separate VMs. Current stable release checked as Qubes OS 4.3.1; 4.2 is end-of-life.Operating system using Xen to isolate activities in separate VMs, with 4.3.1 stable and 4.2 end-of-life.
Review source: older source, not independently verified · public history entry
7 Aug 2026updated
Provider summary rewritten
Card summary
not setDesktop OS isolating your work in Xen VMs.
Review source: older source, not independently verified · public history entry
6 Aug 2026updated
Make service ratings transparent
Evidence status
verifiedpartial
Recorded risk
cautionstandard
Review source: older source, not independently verified · public history entry
6 Aug 2026updated
Provider presentation updated
Best for
General usagenot set
Evidence status
not setverified
Recorded risk
not setcaution
Tagline
A privacy-preserving tool offering genuine utility.not set
Trust level
cautionnot set
Review source: older source, not independently verified · public history entry
16 Jul 2026updated
Scope the Five Eyes deduction to compellable operator data
No hosted operator data
not setyes
Review source: older source, not independently verified · public history entry
5 Jul 2026updated
Clear freshness review queue
Description
A reasonably secure operating system. Uses Xen hypervisor to isolate different aspects of your computing life in separate VMs (compartmentalization). Endorsed by Edward Snowden.A reasonably secure operating system using Xen to isolate different parts of your computing life in separate VMs. Current stable release checked as Qubes OS 4.3.1; 4.2 is end-of-life.
Last reviewed
2026-03-132026-07-05
Review source: older source, not independently verified · public history entry
24 Jun 2026updated
Provider facts reviewed and updated
Checked at
not set2026-06-23
Geo
not setGLOBAL
Review source: older source, not independently verified · public history entry
22 Jun 2026updated
Ship trust audit remediation pass
Jurisdiction confidence
not setinferred
KYC last checked
not set2026-03-13
Last reviewed
not set2026-03-13
Source reviewed
not setolder source, not independently verified
Review source: older source, not independently verified · public history entry
1 Apr 2026updated
Audit remediation — gitignore, font cache, services status, Messaging bucket, CSP img-src, muted contrast AAA
Status
not setok
Review source: source not recorded · public history entry
29 Mar 2026updated
KYC risk level system + advanced directory filters
KYC level
not set0
Review source: source not recorded · public history entry
15 Mar 2026updated
SEO hardening, OG images, ErrorBoundary, Zod validation, CSS article extraction
Countries
noneGLOBAL
Review source: source not recorded · public history entry
14 Mar 2026updated
Provider presentation updated
Fee
not setFree
Privacy warning
not setnot set
Trending
not setno
Updated at
not set2026-03-13
Review source: source not recorded · public history entry
12 Mar 2026updated
Provider facts reviewed and updated
Trust level
verifiedcaution
Review source: source not recorded · public history entry
10 Mar 2026created
Provider facts reviewed and updated
Provider profile
not setcreated
Review source: source not recorded · public history entry

Only fields shown on the provider page are tracked. Private identifiers are never published.

Evidence basis: Claims on this page are linked to published sources for comparison, not certification, audit, endorsement, or recommendation; read the methodology and coverage map before relying on an entry.