Privacy-hardened Chromium for Android

Your ultimate digital shield.

Aegis is Chromium, rebuilt with privacy as the default — ad and tracker blocking at the network layer, third-party cookies off, end-to-end encrypted sync through your own infrastructure. Every patch is public. Every build is free.

Chromium 156 · arm64 92,957 hosts blocked E2E encrypted sync Free, forever
Aegis Shield

Ad blocking lives in the network service,
not in an extension.

A small C++ engine inside Chromium's network layer inspects every subresource request and drops third-party connections to known ad and tracker hosts with ERR_BLOCKED_BY_CLIENT — the same signal adblock extensions produce, without installing anything.

The blocklist is generated from EasyList and EasyPrivacy and compiled into the build. Browser-initiated and same-party requests always pass, and the Aegis sync and ecosystem domains are hard-allowlisted, so the browser can never break itself.

Design, scope and policy: docs/SHIELD.md · semantics-tested blocklist, generated by scripts/aegis-shield/gen_blocklist.py

92,957ad & tracker hosts
0extensions needed
1network pass, first party safe
What is inside

Hardened by default. Quiet by design.

Private by default

Third-party cookies blocked, search suggestions off, Do Not Track on, metrics opt-in only. A ground-truthed patch series against Chromium 156.0.8078.79.

Shipped · v1.2.1

Aegis Shield

Network-level ad and tracker blocking compiled into the browser. No extension, no lists to manage, no telemetry phoning home about what you block.

Shipped · v1.3

Sync that trusts no one

Bookmarks and settings sync end-to-end encrypted through your own Cloudflare Worker. AES-256-GCM with a 600,000-iteration KDF — the server only ever sees ciphertext.

Backend live · UI in build

The ecosystem, built in

Settings ends with an Aegis section: CoreX, OS, AEGIS SOC and the full product catalog, one tap away. Your tools travel with your browser.

Shipped · v1.3

A real identity

A traced shield mark as the launcher icon, adaptive icons for every density, Android 13 monochrome support. Dark-first, monochrome, Montserrat. Not a reskin.

Shipped · v1.2.2

Open source, free forever

Every patch, workflow and script is public on GitHub. Builds run on GitHub's free runners and releases cost nothing. $0 a month, by construction.

Always
The Aegis ecosystem

One shield. A wider armory.

Aegis is part of a family of self-owned tools, each running on its own infrastructure. Nothing rented, nothing leased — the data stays yours.

Download

Get Aegis on Android.

The APK is attached to a draft release after every build, signed with the project's own key. arm64, Android 8 and up.

Open GitHub Releases ↗

v1.3.0 build in flight — Releases always carries the latest signed build.
Prefer to verify everything yourself? The full build pipeline is one click in the Actions tab.

01

Download the APK

Grab AegisBrowser_…_arm64.apk from the latest GitHub release, on your phone or your desktop.

02

Allow install unknown apps

Android asks once, per browser, for permission to install outside the Play Store.

03

Install and browse

The shield-A appears in your launcher. Open it and the network-level blocking is already on.