Syxx Dimensions
A DNS investigative and protection suite.
Every resolver tells a story. Syxx traces DNS lookups end to end — spoofed answers, poisoned caches, silent exfiltration — and writes your resolver's story.
Download for macOS
Windows
Ubuntu (Mint)v0.9 · .NET 10 · free local checks, forever
Upgrade to Pro
Monthly
$3.95 / month
Billed monthly. Cancel anytime.
Best value · save 58%
Yearly
$19.95 / year
Billed annually. Wakes all three server wardens.
Remote Shell
Run the vantage-dependent modules from the server instead of your machine.
Domain
syxx@dimensions — remote shell — ssh syxx.appbutton-only
Portal, Glutton, and Cage read your local network and can only run inside the desktop app — they gain nothing from a remote vantage.
⇌
Warp PRO
Pull a page's HTML, CSS, and JavaScript as plain text from the syxx.app vantage and from your own device at the same instant — then diff them line by line to reveal what the network rewrote in transit.
🔒https://example-bank.com/login
Warp & Diff
⚠2 differences found — the remote copy injected a script and altered a form action not present on your device.
remote-only
local-only
Inspect line-by-line
Legal
End-User License Agreement
The same terms you accept on first run of the app.
Members Area
Remote Terminal
Signed in as •••••• · run the DNS wardens and tooling from the syxx.app vantage.
PRO
Domain
Type
Remote wardens
DNS tools
syxx@dimensions — members shell — restricted DNS command set
This is a governed shell: only the DNS commands above will run — pick one and it uses the domain and type you set. Portal, Glutton, and Cage read your local network and stay inside the desktop app.
⟡
Activate Syxx Pro
Enter the license key emailed to you after purchase. It activates Pro on this device.
No license yet? Subscribe to Pro
Your key is validated server-side via Keygen and bound to your device. It is never sent with DNS data.
Membership
Create Account
$3.95/month or $19.95/year. No permanent licenses — cancel anytime.
🔒
You'll be redirected to Stripe's secure checkout to enter your card details. Syxx servers never store or see card numbers.
Already have a license? Activate it
🛡
Sealed at the door
Your email is encrypted on your device before it ever reaches us. Watch what the server actually stores:
// your row in our database
blind_index: —
sealed_pii : —
operator_read: DENIED
The blind index lets us find your row without knowing your email. The sealed value opens only for a checkout, a license-key email, or your own login. How it works →
Your Dimension
•••••••
Payment method
Visa •••• 4242
Charged by our PCI processor — unsealed only at renewal.
License key
SYXX-PRO-••••-••••-••••
Bound to your device, never sent with DNS data.
Trust
Zero-Knowledge Privacy
Your identity is encrypted on your device. We store only what we cannot read.
“I am personally unable to view any PII on this server, and neither is anyone else. Your email is sealed on your device before it reaches us, and is only ever opened by an isolated service — for a payment, a license key, or your own sign-in.”— J.J. Warne, MilkandGin
1 · Your device
Holds the key
A key is derived from your passphrase (Argon2id) and never leaves. Your email is encrypted here before upload; login decrypts it here.
2 · Syxx server
Holds only ciphertext
Stores a blind index (for lookup) and sealed PII. No key, no plaintext. The operator sees ciphertext and nothing else.
3 · Third parties
Unseal in isolation
The PII is sealed to the payment processor and license mailer. It is decrypted only inside their isolated enclave — never by the app server.
What this guarantees
✓A database dump reveals no emails — only blind indexes and ciphertext.
✓The operator has no decryption key and cannot read your identity.
✓Plaintext exists only transiently, inside an isolated service, at the moment a third party genuinely needs it.
✓Your DNS reports and license key are never linked to your identity on the server.
Telemetry & Usage Data
Syxx collects two kinds of anonymous telemetry, both of which you can turn off in Settings → Privacy:
•Dimension ping (syxx.app) — Once per app launch: your OS name, OS version, and app version. No IP address, no device ID, no DNS data.
•Operational telemetry (bugsmasher.syxx.app) — OTel spans and Sentry crash reports. Spans contain probe labels, timing metrics, and DNS resolver classification. Domain names are never emitted. Resolver IPs are redacted to class tokens. Crash reports include stack traces but no personal data.
Data retention: OTel traces are retained for 30 days. Sentry crash reports are retained for 90 days. Data is stored on Syxx-owned infrastructure and is never shared with third parties.
Legal basis: Legitimate interest (GDPR Art. 6(1)(f)). You can object at any time by turning telemetry off in Settings.
Your rights: Access, rectification, erasure, and portability. Contact us to exercise these rights. Because telemetry is anonymous, we may need additional information to locate your data.
Cookies & storage: This site uses localStorage for session management. No third-party cookies or trackers. The session token is cleared when you sign out.
Data controller: Joel J. Warne, d/b/a MilkandGin. Contact: privacy@syxx.app.