StealthX secure communication without the noise.

SecureCall, SecureChat and Chameleon share one privacy-first security core: encrypted calls, private messaging, context-aware protection and zero-trust defaults for people who cannot afford messy tools.

Download SecureCall Explore the platform Audit on GitHub
No phone number required No call content stored External VPN compatible Source available
SecureCall icon
SecureCall
channel: XChaCha20
ACTIVE
TransportWebRTC + DTLS-SRTP
IdentitySecureID only
Call logs stored0
STEALTH DELETE5 taps wipe local keys and history.
Network ControlChoose a preferred WiFi or mobile connection.
Server OnlineChecking uptime...
Live heartbeatWaiting for signal...
StealthX
Vendetta LabsGreece, EU privacy jurisdiction
Platform

Three products. One security core.

The template reorganizes StealthX into a simple system: calls, messages and device-level privacy tools that share one brand, one crypto direction and one user experience.

SecureCall iconGoogle Play live

SecureCall

Encrypted voice calls with minimal metadata, STEALTH-DELETE and emergency broadcast alerts.

  • E2E encrypted calls
  • Device-managed VPN compatible
  • Clean app checkout flow
Learn more
SecureChat iconAPK available

SecureChat

Encrypted messaging with Double Ratchet forward secrecy, QR contact exchange and StealthX activation tiers.

  • Core messaging build published
  • QR contact exchange
  • SecureChat Elite in Suite
Open SecureChat
Chameleon iconStandalone

Chameleon

Privacy OS for context-aware encryption, overlay protection, rule automation and encrypted private zones.

  • Overlay encryption for any app
  • Automation rules
  • Decoy profile protection
Open Chameleon

StealthX Suite - everything, forever

SecureCall Premium + SecureChat Elite + Chameleon Elite. One-time purchase, no subscription stack.

See suite
Capabilities

Tactical security, not empty promises.

Every architectural decision keeps the tool usable while reducing data exposure. The Google Play edition stays free of app-owned VPN code and can visibly follow a trusted device-managed VPN. The direct Premium APK can additionally run an optional local WireGuard tunnel after Android consent.

🔒

End-to-End Encryption

XChaCha20-Poly1305 AEAD encryption with X25519 key exchange. Every call gets a unique session key.

🛡

Minimal Metadata

No call logs, no contact uploads and no call content stored server-side. FCM tokens exist only for push delivery.

⌘

Source-Available Client

The client source is available for review. Official services and distribution still require Vendetta Labs permission.

🧱

Rust Crypto Engine

Memory-safe crypto code, independently inspectable and designed to avoid buffer-overflow classes of bugs.

🎧

Crystal-Clear Audio

Opus at 48kHz with adaptive bitrate for WiFi and cellular conditions.

🔑

Perfect Forward Secrecy

Double Ratchet session behavior limits blast radius if any single key is compromised.

⌫

Emergency Delete

Five taps wipe contacts, keys and call history, returning the app to factory state.

▦

QR Code & Deep Link Invite

Share SecureCall identity with QR or deep link. One tap adds a contact without manual ID entry.

◉

Diagnostic Logs

Pro/Premium SecLog captures connection, call and network events locally for CSV troubleshooting.

✓

VPN Route Visibility

A green status LED appears only while SecureCall uses Android's active VPN route. Play builds contain no VPN service; the direct Premium APK also supports an optional, locally configured WireGuard tunnel.

▣

Anti-Recording Protection

FLAG_SECURE blocks screenshots. Microphone and recording detection warn or stop the call by tier.

SIM

Network Selection

Pro and Premium users can prefer WiFi or mobile data for SecureCall connections.

↻

Auto-Reconnect

Network switches are detected through ConnectivityManager so calls recover without manual restart.

🔔

FCM Push Notifications

Incoming encrypted calls can wake the device even when the app is closed.

IFR

IFR Holder Discount

Planned web checkout option. Wallet verification and discounted Stripe checkout stay disabled until the payment and accounting launch gates are complete.

v1.7 - Matrix Contact Exchange

Share SecureCall ID through Element, FluffyChat or any Matrix client.

v2.0 - Matrix Federation

Reachable from Matrix users as @sc_xxx:stealthx.tech.

v2.2 - Group Calls

Encrypted multi-party calls through Matrix rooms.

v2.3 - iOS Client + Biometric Lock

Native Swift client with the shared Rust crypto engine.

Protocol

Secure in seconds.

No accounts, no phone numbers, no personal data required.

1

Deploy

Install the signed APK today. Google Play distribution is in review. No registration required.

2

Generate keys

Your device creates a unique X25519 key pair locally. Keys never leave your phone.

3

Share ID

Exchange your anonymous SecureCall ID with your contact through any channel.

4

Establish channel

An encrypted call channel is established. No one intercepts it, not even us.

Security

Cryptographic specifications.

The claims are concrete enough to audit.

EncryptionXChaCha20-Poly1305256-bit AEAD cipher with 192-bit nonce.
Key exchangeX25519 ECDHCurve25519 elliptic curve Diffie-Hellman.
Forward secrecyDouble RatchetPer-session key derivation and zero key reuse.
Audio codecOpus at 48kHzAdaptive bitrate from 6 to 510 kbps.
TransportWebRTC + DTLS-SRTPPeer-to-peer encrypted transport.
Crypto engineRust memory safetyDesigned to avoid buffer overflows and use-after-free.

Read full security architecture

Verified

Tested. Audited. Proven.

Real tests on real devices, organized so the evidence is readable.

300+Automated and device checks
0Crashes and ANRs
38Devices tested
841msAverage app start
E2EXChaCha20 verified

Last verified: June 11, 2026. Current release checks include the 44/44 legacy overnight regression suite plus expanded automated, website, backend and physical-device testing on S10, S7 and Tab S4 hardware.

Quality Audit - v1.0.45

  • Incoming call accept, hold and end
  • Outgoing call through dialer
  • FCM push wakes killed app
  • Online status dots refresh in under 15s
  • Dynamic TURN credentials
  • Tier gating across settings
  • Contact deduplication
  • Screenshot blocking
  • Network audit: TLS, VPN compatibility, no cleartext

Security architecture

  • Zero-knowledge server cannot decrypt calls
  • E2E encryption: XChaCha20-Poly1305 + X25519
  • STEALTH-DELETE emergency wipe
  • Anti-recording and mic hijack detection
  • Proximity sensor wake lock during calls
  • Certificate pinning enabled for protected backend traffic

Full audit report

Source Intelligence

Don't trust. Verify.

SecureCall's source code is publicly available on GitHub. Security researchers, journalists and privacy advocates can inspect the code that handles voice data.

Transparency is part of the product. If we cannot show how it works, you should not trust it.

View on GitHub
// core_crypto/src/lib.rs
pub fn encrypt_voice_frame(
    frame: &[u8],
    key: &SessionKey,
    nonce: &XNonce,
) -> Result<Vec<u8>> {
    let cipher = XChaCha20Poly1305::new(key);
    cipher.encrypt(nonce, frame)
        .map_err(|_| CryptoError::EncryptionFailed)
}
Benchmark

Why SecureCall?

Encrypted calling with anonymous SecureID, local emergency wipe, and resilient network handling.

FeatureSecureCallCommon secure messengers
Anonymous SecureID instead of phone-number identity✓varies
End-to-end encrypted calls✓✓
Device-managed VPN compatibility✓varies
STEALTH-DELETE instant local wipe✓varies
Emergency Broadcast System✓varies
No call content stored server-side✓common
IFR holder checkout discountbrowser purchase onlynot typical
In-app wallet code required for callingnovaries
Source available for audit✓varies
Direct APK download✓varies
Gift activation codes✓varies

Comparison uses broad public product characteristics instead of vendor-specific legal claims. Competitor features change over time; verify current third-party terms before relying on them.

Access levels

Choose your clearance level.

Every tier includes end-to-end encryption. Upgrade for advanced protection through Play billing or activation codes.

Free

€0forever
  • E2E encrypted calls
  • 15 min call limit, 10 contacts
  • Basic security warnings
  • Dark/Light mode
  • Ad-supported banner
  • Call history and online status
  • Anti-recording protection
  • Automatic threat termination
Get started
Most popular

Pro

€3.49/month
  • Everything in Free
  • Online/offline contact status
  • Anti-recording detection
  • Enhanced security monitoring
  • Priority connection
  • Unlimited contacts and calls
  • Automatic threat termination
  • Seller-set IFR holder discount on eligible browser checkout
Available in app

Premium

€4.99/month
  • Everything in Pro
  • Advanced threat detection
  • Exclusive audio focus protection
  • Threat auto-termination
  • Network selection controls
  • No ads or crash reporting
  • Device-managed VPN compatibility in every edition
  • Optional app-managed WireGuard in the direct Premium APK
  • Seller-set IFR holder discount on eligible browser checkout
Compare Play and direct APK
Browser purchase benefit

Planned IFR holder discount

Browser verification and discounted checkout are currently disabled pending payment and Greek fiscal approval. When enabled, ownership will be signed in the browser and checked read-only; no wallet state enters the Android app.

Buy IFR

  • Any positive IFR balance qualifies as a holder
  • The seller-displayed discount applies to the selected product
  • The check cannot move or spend tokens
Open IFR on Uniswap

IFR token logo

Planned Stripe discount verification

IFR discount verification and checkout are currently disabled pending payment and fiscal approval.

How browser verification works

Limited time

Forever licenses. No subscription.

One-time purchase, lifetime access, only 100 licenses per tier. Price increases with each sale.

Limited: 100

Pro Lifetime

€15one-time
Licenses remaining100 / 100

Current VLABS catalog price.

  • Everything in Pro
  • Pay once
  • Access for supported versions
  • Signed activation after confirmed payment
Open VLABS checkout
Limited: 100

Premium Lifetime

€25one-time
Licenses remaining100 / 100

Current VLABS catalog price.

  • Everything in Premium
  • Pay once
  • Access for supported versions
  • Signed activation after confirmed payment
Open VLABS checkout
Gift option

Activation Code

€25one-time

Premium access for supported SecureCall versions. Buy a code for yourself or as a gift, then activate it in Settings.

  • Premium access
  • No subscription
  • Supported versions and platforms
  • Signed activation after confirmed payment
Open VLABS checkout
Intel

Tactical briefing.

The most important questions, without burying users in a wall of copy.

No. Calls are encrypted end-to-end using XChaCha20-Poly1305. Encryption keys are generated on your device and never sent to our servers.
Transparency builds trust. Security researchers, journalists and privacy advocates can verify that the implementation matches the claims.
Free tier uses anonymous crash reports and ads. Pro and Premium have no ads and no crash reporting. All tiers use FCM for push and STUN/TURN for WebRTC. No call content is stored server-side. See Privacy Policy.
Pro and Premium include protection against screen recording, microphone hijacking and spy apps. Premium can terminate the call automatically.
SecureChat is the messaging product of the StealthX Platform. It uses the same crypto direction for text, files and groups, with decentralized relay infrastructure on the roadmap. Learn more.
Signal requires a phone number and centralized servers. SimpleX is decentralized but has no on-chain identity layer. SecureChat aims to combine relay decentralization with verifiable identity anchoring.
Yes. The current Android APK is published on GitHub Releases. SecureChat is still moving toward broader store distribution, but the core encrypted messaging build is available for sideload testing now.

View all FAQ

Ready to secure your comms?

Choose Google Play for automatic store updates or the direct Premium APK for the optional app-managed WireGuard feature.

▶Google PlayFree now ↓DIRECT DOWNLOADPublished v1.0.48 · candidate v1.0.50 ⌘VERIFYGitHub releases

Google Play contains no app-owned VPN service to meet its VpnService distribution requirements. It still follows and indicates a device-managed VPN, and paid feature unlocks remain VPN-service-free. The separately installed Premium APK can add an optional local WireGuard configuration after Android consent.

Privacy-preserving alerts

Emergency Broadcast System

Reach every user instantly without knowing who they are.

How it works

  • Dev team sends a single numeric ID
  • No message text, user data or location transmitted
  • Templates are stored locally on device
  • One-byte ping reaches users simultaneously
  • Works when the app is closed through push notification

10 alert templates

🔴 Critical - stop using app
🟠 Security alert - switch comms
🟡 Update required
🔵 Maintenance pause
⚫ Stealth protocol - go dark
📻 Emergency - turn on radio/TV
⚠ Network warning
🟢 All clear
↻ Update available
📢 Official announcement

Your privacy is preserved at every step.
We do not know who you are or where you are. We send a ping. Your phone does the rest.