Searxly
@SearxlyDownload→
Searxly · Maximum edition
▲ The professional edition

The browser engineered not to leak.

A locked-down edition of Searxly for people who can't afford a leak. Maximum Privacy over Tor is always on and can't be turned down, every off-device feature is removed, and it's built to leave no trace — with a live view that lets you watch it working.

Always-on Tor Fail-closed Per-tab circuits No account · no telemetry
Follow for the launch→See how it works
More privacy, less money

Engineered harder. Less than half the price.

Searxly Maximum
$25one-time
Always-on Tor · 100% local search · no account, no telemetry, no ads.
vs
Brave Origin
$59.99one-time
Chromium base · Tor removed · Rewards, AI & VPN stripped · free on Linux.
$35 less — under half of Brave Origin's one-time price
Why it's different

The strongest posture, with the compromises taken away.

Standard Searxly lets you dial privacy up when you want it. Maximum removes the dial — and everything that could ever phone home is simply not in the build.

01

Locked to Maximum

No "off." The app opens in Maximum Privacy over Tor and stays there. The strongest posture isn't a mode you remember to switch on — it's the only one.

02

Nothing off-device

If a feature could send anything off your Mac, it was removed from this edition entirely — not just disabled. No VPN, no wallet, no AI backend, no pings.

03

Verifiable, not trusted

You don't have to believe it. A live ledger shows where every request goes, and a one-tap test fetches your IP through Tor to prove it's hidden.

No VPN upsellNo walletNo AI backendNo telemetryNo accountNo ads · no token
Head-to-head

Searxly Maximum vs Brave Origin.

Both are strong privacy browsers. Only one makes Tor and total localness the default you can't switch off — and lets you watch it work.

Feature
Searxly Maximum
$25 one-time
Brave Origin
$59.99 one-time
Search & engine
Private search built in
✓MaximumLocal, never logged
–Brave OriginHosted (Brave Search)
Browser engine
✓MaximumWebKit, not Chromium
–Brave OriginChromium base
Anonymity network
Tor — always on
✓MaximumEvery tab & search
✕Brave OriginRemoved in Origin
Fail-closed IP kill switch
✓MaximumBlocks, never leaks
✕Brave OriginNot offered
Per-tab circuit isolation
✓MaximumOne circuit per tab
✕Brave OriginNo Tor in Origin
Fingerprint & trackers
Fingerprint defense
✓MaximumStrict farbling + letterbox
✓Brave OriginRandomized (strong)
Ads & trackers blocked
✓MaximumOn by default
✓Brave OriginShields (strong)
Leave no trace
Amnesic / RAM-only mode
✓MaximumNothing hits disk
–Brave OriginPrivate windows
Anti-forensic downloads
✓MaximumStrips source tag
✕Brave OriginKeeps source tag
No business model on you
No ads or crypto token
✓MaximumNone, ever
✓Brave OriginRewards/BAT removed
Zero telemetry
✓MaximumNone
✓Brave OriginP3A & pings removed
Proof it works
In-app leak ledger + self-test
✓MaximumLedger + Tor self-test
✕Brave OriginNone in-app
The basics
Platforms
–MaximummacOS (Apple Silicon)
✓Brave OriginAll platforms · free on Linux
Price
✓Maximum$25 one-time
–Brave Origin$59.99 one-time
✓ included– limited / partial✕ not offeredReflects Brave Origin (a one-time $59.99 purchase, free on Linux) — not standard Brave. From public docs, Jul 2026.
Inside the edition

Seven layers, each built to fail closed.

Not a settings checklist — the actual behavior, and the way your identity could escape that each one removes.

01 · Routing
Always-on Tor, fail-closed. Every tab and search leaves through the bundled Tor client over SOCKS5h — no DNS leak. If Tor ever drops, traffic is blocked, never sent from your real address.
02 · Identity
A fresh circuit per tab. Each tab carries its own Tor stream token, so two tabs on the same site exit from different nodes — no cross-tab correlation. Bridges (obfs4 & Snowflake) get you connected where Tor is blocked.
03 · Fingerprint
Scrambled and folded into the crowd. Canvas, WebGL, audio and font readouts are farbled; the viewport is letterboxed; timezone and locale are masked; WebRTC is neutered so it can't leak your IP around Tor.
04 · Traces
Amnesic by design. An optional RAM-only mode keeps the whole session in memory — history, tabs, cookies and cache vanish the moment you quit. Bookmarks and passwords stay.
05 · Forensics
Nothing tattooed on disk. Downloads are stripped of the source-URL "where-from" tag macOS writes onto every file, and open windows aren't persisted for restore.
06 · Supply chain
A runtime you can trust. The bundled Tor binary is signature-checked before it runs, and updates are fetched over Tor and verified — so even updating never reveals that this Mac runs Searxly Maximum.
07 · Proof
Watch it work. A live Network Ledger shows where every request goes, and a one-tap self-test fetches your address through Tor to confirm it comes back as a Tor exit.
Read the full mechanism→Where the edge is
▲ Coming soon

Searxly Maximum — $25.

The edition is built and hardening. Purchase opens on the website — no account, no subscription lock-in. Follow along for the launch, and read the full mechanism while you wait.

Follow @Searxly→How it works

macOS 15+ · Apple Silicon · always-on Tor · no account · no telemetry