Services        Products       About        Case Studies        Insights        Contact




Product
Introducing the Vastion Phone, a technologically armored device to secure your digital life.  



We install and implement security measures and software in the hardware of a Google Pixel 7 Pro to create one of the most impenetrable devices available in the market.




Key Features


PRIVACY FOCUS OPERATING SYSTEM Take back the privacy control and permissions over your phone.

 DEGOOGLEDSandboxed google Play compatibility.


USER PROFILES
Separate and isolate daily apps from banking apps from google Apps.


VIRTUAL PRIVATE NETWORK BY DEFAULTDedicated IP assigned exclusively to you through virtual private gateways to prevent unauthorized network access.


MILITARY-GRADE ENCRIPTED COMMUNICATIONSHide your traffic and online activity on the open internet.


CUSTOM DNS AND DNS FILTERING for phishing protection



ATTACK SURFACE REDUCTION AND EXPLOIT MITIGATIONS

MALWARE SCANNERFor your stored files


REAL TIME PROTECTIONBlocks malicious Apps


WEB PROTECTION Blocks access to dangerous websites


ANTI-THEFT Lock or wipe your device remotely when stolen or lost.


SECURED CLOUD STORAGEYour own secret cloud space to safely store and share your files.

PERSONAL DATA BACKED-UP  Your photos, videos and contacts stored and encrypted in our secret and safe cloud.





Defense against explotaition of unknown vulnerabilities


Attack surface reduction to protect users against attackers exploiting unknown vulnerabilities (0 day)
Bluetooth and Wi-Fi timeout

NFC, Bluetooth, UWB disabled by default.

USB and camera access disabled during screen locked.

Native debugging disabled



Exploit mitigations
Hardened app runtime

Secure application spawning system

Hardened kernel, libc, compiler toolchain and memory allocator (malloc)

Android Runtime JIT fully disabled

Dynamic native code execution prevention

filesystem access hardening



Improved Sandboxing

App sandbox through hardening SELinux policy and seccomp-bpf policy



Anti-persistence / detection
Enhanced verified boot and hardware-based attestation. 

Hardware-based security verification and monitoring via Auditor App and attestation service

Compressed APEX module support disabled





And other +25 feautres


Complete patching  including fixes for a large number of vulnerabilities not yet fixed in Android.


Sandboxed Google PlayIsolating the option to install and use official release of Google Play 


Network Permission toggleDisallowing both direct and indirect access to any of the available networks


Sensors permission toggleDisabling access to all or individual phone sensors


Storage ScopesDeciding which users or Apps can access internal storage.


Contact ScopesProviding access to specific contacts or groups of contacts to different users


LTE-only modeTo reduce cellular radio attack surface 


Wi-Fi PrivacyWith MAC address randomization by default


Private screenshotsDisabling sensitive metadata in screenshots


Closed device identifier leaksFor apps not being able to uniquely identify your device


PIN scramblingRandomizing the position of the numbers to protect your PIN code.


Privacy by default Not including or using by default Google apps and services an


Longer passwords support Supporting longer passwords, 64 characters instead of standard 16 characters


Auto reboot To optionally reboot your device after X hours of no usage


More secure fingerprint unlock Disabling fingerprint unlock by intentionally failing to unlock 5 times with a different finger.


Improved user profilesApps cannot see or communicate with the apps in other user profiles.


Hardened WebView browser Vanadium browser providing enhanced privacy and security while browsing content over the web. 


Disabling app installationRemoving permissions for secondary users app installation 


Auditor app and attestation service Providing strong hardware-based verification of the authenticity and integrity of the firmware/software on the device


Location data access indicator Informing the user each time an App ask for location data access permissions.


Hardened and sandboxed PDF vieweRA sandboxed WebView without access to content, files, or the network.





Related 
Services

Contact









Safeguarding Digital Lifes



© 2023 - DEMONITO PERSONAL CYBERSECURITY SC .  LEGAL NOTICE.