The Denly fox guarding an open padlock

Your den on
the internet.

A single-binary, self-hostable home online: verified identity, encrypted file drops, and a dead man's switch. Open source. Your keys never leave your device.

$ curl -fsSL https://denly.xyz/install.sh | sh
one command. one binary. your whole den. (soon)
๐Ÿ”‘
Your keys, alwaysGenerated on your device. Never transmitted. Even we can't read your stuff.
๐Ÿ“ฆ
One binaryNo Docker maze, no database server. Download, run, done.
๐ŸŒ
Outlive platformsAnchored to open protocols โ€” Nostr, IPFS, Arweave. Not to us.
๐Ÿ“–
Open sourceAGPLv3. Audit every line. Self-host forever, free.
What's in the den

Everything you need to
hold your corner of the web

Not another platform. Software you run, on infrastructure you choose, proving identity with math instead of terms of service.

๐Ÿ 

Presence page

Your public home โ€” bio, links, posts โ€” cryptographically verified as yours via Nostr NIP-05 and ATProto. No platform can take it down or fake it.

๐Ÿ“ฌ

Encrypted drops

Send and receive files end-to-end encrypted in the browser. The server stores only ciphertext. Expiring links, burn-after-download, zero knowledge.

๐Ÿ›ก๏ธ

Receive box

A "send me a file" button for your page โ€” with approval flow. Sources, friends, and strangers can request; you accept before anything lands.

โšฐ๏ธ

Deadhand

A dead man's switch that actually can't be read by the operator. Encrypted payloads, heartbeat check-ins, guardian thresholds, permanent storage.

flagship
๐Ÿง…

Reachable anywhere

Localhost, Tailscale, Tor onion, or your own domain with auto-TLS. No port-forwarding nightmares โ€” one toggle and you're reachable.

๐Ÿ’พ

Permanent backups

Every publish pins to IPFS; one click pays once for Arweave permanence. Export everything anytime. If we vanish, your den doesn't.

The flagship

Deadhand: the switch that fires when you can't

Named for the Cold War system that answered the unthinkable. Compose encrypted messages and files for the people who matter โ€” family, a lawyer, the public. Check in on your schedule. If you stop, Deadhand delivers.

  • Payloads encrypted to recipients' keys before they leave your browser
  • Heartbeat via signed note, link click, CLI ping, or wallet signature
  • Escalation reminders and trusted-contact nudges prevent false alarms
  • v2: N-of-M guardian thresholds โ€” and guardians can prove you're alive
  • Test-fire a drill anytime, so you trust the machinery
๐ŸฆŠ Deadhand ยท Switch #1 โ— ARMED
Payloadencrypted ยท 2 recipients
StorageArweave ยท permanent โœ“
Check-in interval30 days + 14 grace
Last heartbeat9 days ago
Next check-in due in 21 days โ€” we'll nudge you, then your trusted contact, before anything fires. Mockup of the planned interface.
How it works

Three steps to sovereignty

1

Run one command

One static binary with the database and UI built in. Runs on a $4 VPS, a Raspberry Pi, or your laptop.

curl -fsSL https://denly.xyz/install.sh | sh
2

Claim your keys

Keys generate on your device and never leave it. Link your Nostr or ATProto identity to prove the den is yours.

denly init
3

Open your den

Publish your page, start dropping files, arm your switch. Localhost, Tailscale, Tor, or your own domain.

denly serve
We host availability,
not secrets.

Every sensitive payload is encrypted on your device before it touches any server โ€” yours or ours. Self-host the whole thing for free, forever. If a hosted version ever exists, it will hold ciphertext it cannot read, and you can export and leave anytime. That's not a promise; it's the architecture.

Roadmap

Built in public, shipped in phases

Follow along on GitHub and X. Every phase launches with demos, not promises.

NOW

Phase 0 โ€” Foundations

Done and open source: the single binary, embedded storage, signed release pipeline, and one-command installer. No product features yet.

NEXT

v1 โ€” Core den

Presence page, Nostr identity verification, encrypted drops with receive box, and the CLI.

THEN

v2 โ€” Deadhand

The dead man's switch: heartbeats, escalation, encrypted payload release, Arweave permanence, drill mode.

MAYBE

Hosted tier

Only if the waitlist demands it. Same code, same crypto, isolated per-customer instances. Export-and-leave anytime, guaranteed by design.

Early access

Get a ping when the den opens ๐ŸฆŠ

v1 launch notification, build-in-public updates, and a vote on whether hosted hosting should exist. No spam, no tracking โ€” obviously.

Prefer protocols? Watch the repo on GitHub instead.