PRESS EDITION · LYDOS PHONE
For journalists.
For activists. For doctors.
A hardware kill-switch. Protection against forced unlocking. On-device voice transformation. Hidden-camera detection. Satellite fallback. At the border, in a raid, on a conference floor — your phone stays on your side.
LOCKED AT THE FACTORY
Nine modules sealed in hardware. The user cannot open them.
Press Edition ships with nine modules cryptographically locked at the factory. The bootloader will not unlock — not even for the user. This is the point: an attacker who seizes the device cannot coerce its owner into opening it.
Bootloader sealed
The bootloader will not unlock. Not for the user, not for an attacker, not for us. The seal is verified at every boot.
Verified boot chain
If any partition is altered between flashes, the phone refuses to come up normally and enters safe mode.
Master key bound to hardware
The on-device master key is sealed inside the secure element. Even physically disassembling the chip will not yield it.
Kernel-level write veto
Even if an attacker gains root, the kernel layer refuses to let them write to sovereign storage. The phone simply will not betray itself.
Audit log is write-only
The audit chain lives on a partition that cannot be erased by user space — only appended to, only verified.
Drill mode is isolated
When you run a disaster drill, the practice traffic is segregated from real audit history. Training never poisons evidence.
OEM unlock removed
The developer setting that would let someone unlock the phone is gone. There is no menu item.
ADB disabled
The debug bridge that a forensic tool would use is off. Not togglable, not certifiable around.
Per-file encryption
Every file in user data is encrypted with its own key, bound to the secure element. Lose the chip, lose the data.
JOURNALIST KIT
Everything you need, day one.
THREAT MODEL
What we can protect against — and what we can’t.
Manufacturer honesty. We list the attack vectors that fall outside what we can stop. Hiding them in marketing copy can cost a journalist their freedom — or their life.
What we protect against
- Physical seizureHardware kill-switch wipes user data, revokes the device key, and seals the audit trail in seconds. Even disassembling the chip will not yield your secrets.
- Network man-in-the-middleVPN + onion routing + sovereign DNS over QUIC. TLS pinning is enforced by the device key at runtime.
- IMSI catcher and cell-tower trackingIn safe mode, cellular is shut off entirely and exits go over satellite. Cell IDs are reshuffled continuously.
- Forced unlocking (rubber-hose)Decoy profile, a panic-screen, and a duress unlock that wipes the device on demand. The phone does not betray you by being unlocked.
- Supply-chain firmware tamperingReproducible build + three-signature update + verified boot. You can compile, hash, and compare before flashing.
What we don’t — honestly
- Zero-day baseband exploitsThe modem firmware is closed-source — true for every commercial phone. The blast radius is contained at the kernel boundary by the immune-system engine, but we will not promise to detect every zero-day.
- Evil-maid attack before you receive the phoneIf the device is intercepted before reaching you, verified boot will still catch the tamper — but data leaked before you took possession cannot be undone. Buy from an authorized channel.
Saying no is honest. The risks we cannot remove, we do not hide at the bottom of the page.
EDITOR LICENSING
Newsrooms · NGOs · journalist unions.
Press Edition is designed for institutions, not individuals. Bulk licensing, centralized provisioning, certificate management, and lost-or-seized device revocation are first-class.
One-shot setup for 100+ devices with the newsroom’s own root certificate. Reporters arrive, sign on, and start working — no IT bottleneck.
If a device is seized or lost, the editor console revokes it in seconds. Three-signature quorum ensures no single admin can revoke alone.
When a returned device is examined, the tamper-proof audit chain exports cleanly. Likely attack steps and any data exposure are reported in plain English.
CONTACT
Apply for the pilot program.
For newsrooms and NGOs — no email collection on the request. Replies inside seven working days. Pilot devices ship under MoU.
Apply for the pilot →