StealthX secure communication without the noise.

SecureCall, SecureChat and Chameleon share one privacy-first security core: encrypted calls, private messaging, context-aware protection and zero-trust defaults for people who cannot afford messy tools.

Download SecureCall Explore the platform Audit on GitHub
No phone number required No call content stored WireGuard VPN Source available
SecureCall icon
SecureCall
channel: XChaCha20
ACTIVE
TransportWebRTC + DTLS-SRTP
IdentitySecureID only
Call logs stored0
STEALTH DELETE5 taps wipe local keys and history.
GhostVPNPremium WireGuard tunnel for SecureCall traffic.
Server OnlineChecking uptime...
Live heartbeatWaiting for signal...
StealthX
Vendetta LabsGreece, EU privacy jurisdiction
Platform

Three products. One security core.

The template reorganizes StealthX into a simple system: calls, messages and device-level privacy tools that share one brand, one crypto direction and one user experience.

SecureCall iconAPK live - Play review

SecureCall

Encrypted voice calls with minimal metadata, WireGuard VPN, STEALTH-DELETE and emergency broadcast alerts.

  • E2E XChaCha20-Poly1305
  • WireGuard VPN built in
  • Clean app checkout flow
Learn more
SecureChat iconAPK available

SecureChat

Encrypted messaging with Double Ratchet forward secrecy, QR contact exchange and StealthX activation tiers.

  • Core messaging build published
  • QR contact exchange
  • SecureChat Elite in Suite
Open SecureChat
Chameleon iconStandalone

Chameleon

Privacy OS for context-aware encryption, overlay protection, rule automation and encrypted private zones.

  • Overlay encryption for any app
  • Automation rules
  • Decoy profile protection
Open Chameleon

StealthX Suite - everything, forever

SecureCall Premium + SecureChat Elite + Chameleon Elite. One-time purchase, no subscription stack.

See suite
Capabilities

Tactical security, not empty promises.

Every architectural decision keeps the tool usable while reducing data exposure. Nothing from the old feature set was removed; it is grouped so users can scan it.

🔒

End-to-End Encryption

XChaCha20-Poly1305 AEAD encryption with X25519 key exchange. Every call gets a unique session key.

🛡

Minimal Metadata

No call logs, no contact uploads and no call content stored server-side. FCM tokens exist only for push delivery.

⌘

Source-Available Client

The client source is available for review. Official services and distribution still require Vendetta Labs permission.

🧱

Rust Crypto Engine

Memory-safe crypto code, independently inspectable and designed to avoid buffer-overflow classes of bugs.

🎧

Crystal-Clear Audio

Opus at 48kHz with adaptive bitrate for WiFi and cellular conditions.

🔑

Perfect Forward Secrecy

Double Ratchet session behavior limits blast radius if any single key is compromised.

⌫

Emergency Delete

Five taps wipe contacts, keys and call history, returning the app to factory state.

▦

QR Code & Deep Link Invite

Share SecureCall identity with QR or deep link. One tap adds a contact without manual ID entry.

◉

Diagnostic Logs

Pro/Premium SecLog captures connection, call and network events locally for CSV troubleshooting.

✓

WireGuard VPN

Premium tunnel routes SecureCall traffic through WireGuard with a kill switch and real GoBackend.

▣

Anti-Recording Protection

FLAG_SECURE blocks screenshots. Microphone and recording detection warn or stop the call by tier.

SIM

eSIM Call Routing

Premium routing mode can bind the WireGuard underlay to cellular when an eligible mobile network is available.

↻

Auto-Reconnect

Network switches are detected through ConnectivityManager so calls recover without manual restart.

🔔

FCM Push Notifications

Incoming encrypted calls can wake the device even when the app is closed.

IFR

IFR Holder Discount

Planned web checkout option. Wallet verification and discounted Stripe checkout stay disabled until the payment and accounting launch gates are complete.

v1.7 - Matrix Contact Exchange

Share SecureCall ID through Element, FluffyChat or any Matrix client.

v2.0 - Matrix Federation

Reachable from Matrix users as @sc_xxx:stealthx.tech.

v2.2 - Group Calls

Encrypted multi-party calls through Matrix rooms.

v2.3 - iOS Client + Biometric Lock

Native Swift client with the shared Rust crypto engine.

Protocol

Secure in seconds.

No accounts, no phone numbers, no personal data required.

1

Deploy

Install the signed APK today. Google Play distribution is in review. No registration required.

2

Generate keys

Your device creates a unique X25519 key pair locally. Keys never leave your phone.

3

Share ID

Exchange your anonymous SecureCall ID with your contact through any channel.

4

Establish channel

An encrypted call channel is established. No one intercepts it, not even us.

Security

Cryptographic specifications.

The claims are concrete enough to audit.

EncryptionXChaCha20-Poly1305256-bit AEAD cipher with 192-bit nonce.
Key exchangeX25519 ECDHCurve25519 elliptic curve Diffie-Hellman.
Forward secrecyDouble RatchetPer-session key derivation and zero key reuse.
Audio codecOpus at 48kHzAdaptive bitrate from 6 to 510 kbps.
TransportWebRTC + DTLS-SRTPPeer-to-peer encrypted transport.
Crypto engineRust memory safetyDesigned to avoid buffer overflows and use-after-free.

Read full security architecture

Verified

Tested. Audited. Proven.

Real tests on real devices, organized so the evidence is readable.

300+Automated and device checks
0Crashes and ANRs
38Devices tested
841msAverage app start
E2EXChaCha20 verified

Last verified: June 11, 2026. Current release checks include the 44/44 legacy overnight regression suite plus expanded automated, website, backend and physical-device testing on S10, S7 and Tab S4 hardware.

Quality Audit - v1.0.41

  • Incoming call accept, hold and end
  • Outgoing call through dialer
  • FCM push wakes killed app
  • Online status dots refresh in under 15s
  • Dynamic TURN credentials
  • Tier gating across settings
  • Contact deduplication
  • Screenshot blocking
  • Network audit: TLS, VPN compatibility, no cleartext

Security architecture

  • Zero-knowledge server cannot decrypt calls
  • E2E encryption: XChaCha20-Poly1305 + X25519
  • STEALTH-DELETE emergency wipe
  • Anti-recording and mic hijack detection
  • Proximity sensor wake lock during calls
  • Certificate pinning enabled for protected backend traffic

Full audit report

Source Intelligence

Don't trust. Verify.

SecureCall's source code is publicly available on GitHub. Security researchers, journalists and privacy advocates can inspect the code that handles voice data.

Transparency is part of the product. If we cannot show how it works, you should not trust it.

View on GitHub
// core_crypto/src/lib.rs
pub fn encrypt_voice_frame(
    frame: &[u8],
    key: &SessionKey,
    nonce: &XNonce,
) -> Result<Vec<u8>> {
    let cipher = XChaCha20Poly1305::new(key);
    cipher.encrypt(nonce, frame)
        .map_err(|_| CryptoError::EncryptionFailed)
}
Benchmark

Why SecureCall?

Encrypted calling with anonymous SecureID, local emergency wipe, and optional VPN features.

FeatureSecureCallCommon secure messengers
Anonymous SecureID instead of phone-number identity✓varies
End-to-end encrypted calls✓✓
Built-in WireGuard VPN controls✓varies
STEALTH-DELETE instant local wipe✓varies
Emergency Broadcast System✓varies
No call content stored server-side✓common
IFR holder checkout discountactivenot typical
In-app wallet code required for callingnovaries
Source available for audit✓varies
Direct APK download✓varies
Gift activation codes✓varies

Comparison uses broad public product characteristics instead of vendor-specific legal claims. Competitor features change over time; verify current third-party terms before relying on them.

Access levels

Choose your clearance level.

Every tier includes end-to-end encryption. Upgrade for advanced protection through Play billing or activation codes.

Free

€0forever
  • E2E encrypted calls
  • 15 min call limit, 10 contacts
  • Basic security warnings
  • Dark/Light mode
  • Ad-supported banner
  • Call history and online status
  • Anti-recording protection
  • GhostNet IP masking
Get started
Most popular

Pro

€3.49/month
  • Everything in Free
  • Online/offline contact status
  • Anti-recording detection
  • Enhanced security monitoring
  • Priority connection
  • Unlimited contacts and calls
  • GhostNet IP masking
  • IFR holder discount planned for a later launch
Available in app

Premium

€4.99/month
  • Everything in Pro
  • Advanced threat detection
  • Exclusive audio focus protection
  • Threat auto-termination
  • GhostNet IP masking
  • No ads or crash reporting
  • WireGuard VPN integration
  • IFR holder discount planned for a later launch
Available in app
Planned integration

IFR Holder Discount

The IFR holder discount is not currently available for purchase. Wallet verification and discounted checkout remain disabled until payment, accounting, and production configuration are approved.

Read planned flow

Limited time

Forever licenses. No subscription.

One-time purchase, lifetime access, only 100 licenses per tier. Price increases with each sale.

Limited: 100

Pro Lifetime

€15one-time
Licenses remaining100 / 100

Current VLABS catalog price.

  • Everything in Pro
  • Pay once
  • Access for supported versions
  • Signed activation after confirmed payment
Open VLABS checkout
Limited: 100

Premium Lifetime

€25one-time
Licenses remaining100 / 100

Current VLABS catalog price.

  • Everything in Premium
  • Pay once
  • Access for supported versions
  • Signed activation after confirmed payment
Open VLABS checkout
Gift option

Activation Code

€25one-time

Premium access for supported SecureCall versions. Buy a code for yourself or as a gift, then activate it in Settings.

  • Premium access
  • No subscription
  • Supported versions and platforms
  • Signed activation after confirmed payment
Open VLABS checkout
Intel

Tactical briefing.

The most important questions, without burying users in a wall of copy.

No. Calls are encrypted end-to-end using XChaCha20-Poly1305. Encryption keys are generated on your device and never sent to our servers.
Transparency builds trust. Security researchers, journalists and privacy advocates can verify that the implementation matches the claims.
Free tier uses anonymous crash reports and ads. Pro and Premium have no ads and no crash reporting. All tiers use FCM for push and STUN/TURN for WebRTC. No call content is stored server-side. See Privacy Policy.
Pro and Premium include protection against screen recording, microphone hijacking and spy apps. Premium can terminate the call automatically.
SecureChat is the messaging product of the StealthX Platform. It uses the same crypto direction for text, files and groups, with decentralized relay infrastructure on the roadmap. Learn more.
Signal requires a phone number and centralized servers. SimpleX is decentralized but has no on-chain identity layer. SecureChat aims to combine relay decentralization with verifiable identity anchoring.
Yes. The current Android APK is published on GitHub Releases. SecureChat is still moving toward broader store distribution, but the core encrypted messaging build is available for sideload testing now.

View all FAQ

Ready to secure your comms?

Deploy SecureCall and establish the first encrypted channel in under 60 seconds.

▶Google PlayFree now ↓DIRECT DOWNLOADAPK builds (v1.0.41 vC77) ⌘VERIFYGitHub releases

Requires Android 7.0+ · approximately 80 MB · no account required · upgrade anytime with activation code or in-app purchase.

Privacy-preserving alerts

Emergency Broadcast System

Reach every user instantly without knowing who they are.

How it works

  • Dev team sends a single numeric ID
  • No message text, user data or location transmitted
  • Templates are stored locally on device
  • One-byte ping reaches users simultaneously
  • Works when the app is closed through push notification

10 alert templates

🔴 Critical - stop using app
🟠 Security alert - switch comms
🟡 Update required
🔵 Maintenance pause
⚫ Stealth protocol - go dark
📻 Emergency - turn on radio/TV
⚠ Network warning
🟢 All clear
↻ Update available
📢 Official announcement

Your privacy is preserved at every step.
We do not know who you are or where you are. We send a ping. Your phone does the rest.