We're launching GuardBox on Kickstarter — a sandboxed container that intercepts images and attachments from WhatsApp, Telegram, and email, and opens them inside ephemeral EU cloud sandboxes. Help us put it in the hands of journalists, activists, families and organizations across Europe.
CVE-2019-11932 (WhatsApp GIF), CVE-2020-8899 (Samsung Qmage), Pegasus and ForcedEntry all payload images and files to compromise phones — many with zero clicks. Today, attackers also disguise APK installers and RAR payloads as PDFs, JPGs and DOC receipts forwarded from people you trust.
WhatsApp and Telegram don't protect your device out of the box — you decide whether to trust what you receive.
APK installers and malware re-iconned as a PDF, JPG invitation or DOC receipt.
CVEs in image and document parsers can fire the moment a thumbnail loads.
Forward or share media directly into your GuardBox for safe viewing.
Add the GuardBox bot to chats and groups to route incoming media through the sandbox.
Route inbound attachments through GuardBox before they reach your inbox.
Stream a flattened pixel render — never the original file — to your browser.
Isolated, ephemeral containers in EU regions, with possibility to get destroyed after every render.
Drop GuardBox into your apps with one REST call or signed webhook.
GuardBox protects individuals who live on their phone — and the organizations that defend thousands of them.
News Agency, NGOs and public sector teams under GDPR, NIS2. Deploy GuardBox in front of any inbound image, file or attachment pipeline — protect every employee at once.
Backing GuardBox keeps us independent — no surveillance ads, no data brokers. Every pledge goes directly into sandbox infrastructure, security audits, and a free tier that stays free.
No VC pressure to monetise your data. Hosted in EU regions, GDPR & NIS2-aligned.
Funding lets us add iOS share-sheet, Telegram bot and email gateway in months, not years.
Backer money keeps GuardBox Personal free for journalists, activists and families.
No accounts required. No analytics. No third-party SDKs.
Get notified about the campaign — no spam, unsubscribe anytime.
We'll only email you about this campaign.