Zero-trust browser for iPhone · Private beta
The web runs in our cloud. Your keys stay on your phone.
AEGIS opens every site in a disposable cloud browser. Your logins live in a vault the browser can't read, and payments wait for Face ID on your phone.
One email when your invite is ready. Nothing else.
01 The risk
270,000,000
iPhones were exposed to DarkSword. One visit to an infected web page was enough to empty a crypto wallet.
$5.57M
stolen from wallets, no signature or approval needed
23
iOS exploits in Coruna, a spy-grade kit turned crypto theft
$0
to get the newer DarkSword: it leaked on GitHub
iVerify and Lookout via Reuters (220–270M devices on affected iOS versions); CertiK estimate; Google Threat Intelligence; TechCrunch. 2026.
02 How it works
One app. Three levels of protection.
-
01
Open
Any link opens in a throwaway cloud browser. Only pixels reach your phone, and the browser is destroyed when you close the tab.
Free -
02
Secure
Your logins live in a vault, not in the browser. Payments and sensitive actions need Face ID on your iPhone.
Plus · Pro · Teams -
03
Agent
Your AI assistant browses in its own isolated browser. You watch it live and approve anything that costs money.
Every plan, per minute
The browser can be hacked. It still has nothing to steal.
| Property | Your iPhone | Cloud browser | Trusted domain |
|---|---|---|---|
| Runs web code | Never | Yes, then destroyed | Never |
| Holds your logins | No | No, only placeholders | Yes, encrypted |
| Holds signing keys | Yes, Secure Enclave | Never | Public keys only |
| Approves payments | You, with Face ID | Can only ask | Checks the signature |
| Reaches the internet | Video stream only | Only through our gateway | Enforces your policy |
03 Agent Mode
Your AI assistant gets a browser it can't abuse.
- Built for assistants like Claude and ChatGPT, through one MCP server
- Watch the live browser inside the chat, and take over any time
- The agent never sees your logins
- Payments wait for your Face ID
04 Security, honestly
We publish what we don't protect.
Designed to protect
- Web code never runs on your phone
- Long-term keys never reach the browser
- A hacked browser can't steal your HttpOnly sessions
- Approved payments can't be altered or replayed
Not protected (yet)
- Tokens a site keeps in JavaScript
- Requests a hacked browser makes while it is alive
- Prompt injection against AI agents
- A malicious operator, until confidential computing
AEGIS is in development. Every protected property will ship with an automated security test, and the threat model is available on request.
05 Private beta
Get early access.
iPhone first. Invites go out in small batches, starting with people who handle crypto and other high-value accounts.