GrapheneOS

GrapheneOS is a privacy and security focused mobile OS that improves the security of both the OS and the apps running on it. Key features include a fortified app sandbox, improved permission model, and substantial improvements to exploit mitigations. The OS also includes various security-focused apps, such as Vanadium, a hardened variant of the Chromium browser, and a minimal security-focused PDF Viewer. GrapheneOS provides local and remote verification of devices through its Auditor app and attestation service. The OS does not include Google Play services, but allows for the installation of Play services as fully sandboxed apps. Technical implementation details include the use of substantial improvements to sandboxing, exploit mitigations, and permission models to mitigate whole classes of vulnerabilities. Specific use cases include the ability to restrict access to certain features when the device is locked, and the ability to verify the security of devices remotely. Unique differentiators include the non-profit, open-source nature of the project, and the focus on providing a private and secure mobile OS without relying on Google services.