Eight tools.One principle:your machine is the boundary.
Every x2y product is offline-first and account-free. Seven tools remain free, while Code Leak Detector is available under a one-time $29 licence. No telemetry, no cloud dependency, no compromises.
Comprehensive security suite for Windows. Real-time protection, threat intelligence with 5,500+ signatures from MalwareBazaar, URLhaus, OpenPhish and ClamAV, persistence auditing, network monitoring and an encrypted quarantine vault. Protects your system without slowing it down.
Dual-engine scanning on ClamAV 0.105 and YARA 4.5
Persistence auditor for startup and registry analysis
Offline by choice, secure by design. A high-security 2FA vault with Stealth Mode for duress protection, encrypted Panic Backups via Master QR, and a WiFi Companion that streams codes to your PC browser over the local network only.
100% offline TOTP — no internet required ever
Stealth Mode with decoy vault for duress scenarios
Scans your entire codebase for accidentally exposed secrets — API keys, tokens, passwords and credentials. 200+ detection patterns, entropy-based analysis, real-time file watching, and Gitleaks and TruffleHog rule set integration. Deep scan mode reaches into binaries and archives.
200+ patterns plus entropy-based detection
Real-time file watcher with instant alerts
Gitleaks and TruffleHog rule integrations
SARIF and JSON export, pre-commit hook, learning mode
Professional-grade desktop crawler for web developers, SEO specialists and digital marketers. Full JavaScript rendering, multi-format sitemap generation (XML, HTML, JSON, TXT), a visual robots.txt architect, broken link detection and metadata audit — all processed locally.
Professional Node.js SDK combining API traffic monitoring, predictive issue analysis and intelligent code refactoring. Record API calls, predict failures before they happen, and get line-level suggestions for idiomatic, performant and modern async code. ES6 and CommonJS, TypeScript types included.
API traffic recording and predictive issue analysis
Professional archive manager for Windows. Open, browse, extract, create, convert, split and merge archive files entirely offline. Full AES-256 password encryption for ZIP and 7Z, inline file previews, and support for 30+ formats including RAR, TAR, ISO, CAB and WIM.
Professional text editor combining the simplicity of Windows Notepad with powerful tools for coding, scripting and managing text files. Command-line usage, file associations, syntax highlighting for 30+ languages, auto-save with a 5-version backup system, and advanced editing features.
Never commit secrets again. Project-aware .gitignore generation with 20+ curated templates covering Node.js, Python, React, Rust, C++, macOS, VSCode and more. Audit existing repositories for dangerous exposures — .env files, credentials, build artifacts and editor swap files.
20+ curated templates, bundled locally
Repository scanning for unignored sensitive files
Custom template creation, save, export and import
Atomic write with diff preview, copy to clipboard
WINDOWS20+ TEMPLATESFREE
Shared principles
Every product in the suite answers to the same three commitments
01
Offline-first
Every feature works without a network connection. If a capability cannot function offline, it does not ship. Signature bundles, template libraries, rule packs and rendering engines are embedded in the installer.
02
Zero telemetry
No analytics, no crash reports, no "help improve" prompts, no licence verification calls. Verified at 0 bytes collected across the entire suite since day one. Confirm with any network monitor.
03
No accounts, ever
Downloads require no sign-up. Licences do not phone home. Your copy is yours — online, offline, forever. The suite has been free since July 2026 under a donationware model.
How to choose
Start from the problem, not the product
Eight tools, one architecture. Pick by the job in front of you — every page on this site states the version, the platform and the price, and none of them asks for an account.
Overlapping by design. GitIgnore Generator keeps sensitive paths out of a commit, Code Leak Detector finds what a rule missed, and the x2y SDK exposes both engines programmatically for CI. Nothing needs to talk to us for any of it to work.
Suite questions
What people ask before they download anything
Seven of the eight are free for personal and commercial use under the donationware model adopted in July 2026. Code Leak Detector moved to a single one-time USD 29 licence on 1 September 2026 — no subscription, no seat management and no account. Free-period copies keep working. See the Terms of Use.
No. Downloads need no sign-up, licences never phone home, and no product shows a first-run registration dialog. Your copy works online, offline and indefinitely.
Run any product under Wireshark, GlassWire, mitmproxy or your operating system's firewall log and observe zero outbound connections attributable to the application. Every product page states its own data policy in a Security model section.
Windows 10 and 11 for the desktop tools, Android for x2y Authenticator, and Node.js 18+ for the x2y SDK. There is no iOS app, and Authenticator has no Windows vault — its WiFi Companion streams codes to a browser on your local network instead. Those limits are stated on the product pages rather than buried in a footnote.
Microsoft Store and itch.io for Windows installers, GitHub Releases with signed artefacts and SHA-256 checksums, Uptodown and APKPure as mirrors, and the npm registry for the SDK. Verify the checksum before installing anything.
Yes. All products may be used commercially, and the zero-telemetry design is usually what compliance and data-residency review latches on to: there is no processing to describe, because there is no processing. Security tooling for regulated environments is one of our named audiences.
Nothing changes on your machine. There is no service to shut down, no licence server to go dark and no sync to break. Signed installers, checksums and the MIT-licensed SDK stay usable, which is the point of offline-first software.
The documentation holds installation steps, per-product references, the security model, the changelog and the support channels. Specific questions can go to support@x2ydevs.xyz.
Ready to start
Pick a tool, download it, and get to work
No account. No telemetry. No cloud. Every product installs in seconds and runs entirely on your machine — with seven free tools and Code Leak Detector available under a one-time $29 licence.
