Nairobi · est. Oct 2025 · zero telemetry

Engineeringdigital sovereignty.

x2y Devs Tools builds antivirus, 2FA, secret-scanning and developer utilities that run entirely on your hardware. No cloud uploads. No forced accounts. No telemetry — ever.

Download the suite Read the docs

WINDOWS 10/11 · ANDROID · NODE 18+ — FREE SINCE JUL 2026

x2y-av · local session● OFFLINE

engines: ClamAV · YARAsignatures: 2026-08-08sha256 ✓ verified

0 B

Telemetry collected, ever

Tools, one suite

100%

Offline processing

Jul ’26

Suite went free

Available on

itch.ioMicrosoft StoreGitHub Releasesnpm registrysdk.x2ydevs.xyz

01 · Product suite

Eight tools. One principle: your machine is the boundary.

01 / 07

x2y AV Ultimate

v8.5.0

Windows antivirus & integrity monitor on open engines. Endpoint protection that never leaves the endpoint.

x2y Authenticator

v1.0.0

Offline TOTP vault for Android & Windows. Two-factor codes, generated and kept entirely on-device.

482 913offline · 30 s

x2y SDK

npm · stable

Cross-platform Node.js toolkit for monitoring, refactoring & analysis. The x2y engine room, as Node.js modules.

sdk · local session● OFFLINE

Code Leak Detector

v2.0.5

Local scanner for secrets, tokens & credentials in code. Find secrets before they leave your disk.

Free today — then a one-time $29 licence from 1 Sep 2026. No subscriptions.Free until 1 Sep 2026

x2y Extractor

v2.1.0

Archive manager with AES-256 encryption & previews. Pack, unpack and encrypt — with AES-256, no cloud in sight.

x2y Devs Pad

v2.0.0

Developer text editor with a CLI companion. A fast, quiet text editor for people who ship.

x2y GitIgnore Generator

v1.0.0

.gitignore helper with 20+ templates & repo scanning. Project-aware .gitignore files in one scan.

SiteDirective

v2.0.0

SEO & sitemap crawler with JS rendering and proxies. Map, render and audit your site — entirely from your desktop.

02 · Security model

Privacy isn’t a setting. It’s the architecture.

Most tools promise not to look at your data. Ours physically can’t — there is no upload path, no analytics SDK, no crash pipeline. The manifest below is the entire data policy.

System manifest
Telemetry	0 bytes collected
Account required	None — ever
Data egress	None by design
Scan engines	ClamAV · YARA (open source)
Archive crypto	AES-256 (Extractor)
2FA storage	On-device vault
Updates	Signed releases via GitHub
Licence	Free since Jul 2026 · donationware

Local by architecture

Every engine runs in-process on your machine. There is no upload path to design around — and none to exploit.

Open, auditable engines

Scanning is delegated to ClamAV and YARA with public signature feeds you can inspect, pin and verify offline.

Cryptography where it matters

AES-256 for archives, on-device TOTP secrets, and signed release artifacts with published checksums.

Zero telemetry, verifiable

No analytics, no crash uploader, no “help improve” checkbox. Put any tool under a network monitor and watch it stay silent.

No accounts, ever

Downloads don’t require sign-up. Licences don’t phone home. Your copy is yours — online, offline, forever.

FIG. 01 — DATA FLOW. NOTHING CROSSES THE BOUNDARY. VERIFY WITH ANY NETWORK MONITOR.

03 · Solutions

Built for the people who read the changelog.

03 / 07

Independent developers

From .gitignore to release archives: small, fast utilities that respect your machine and your time. Nothing installs a daemon; nothing asks for an account.

→ Devs Pad · GitIgnore Generator
→ Extractor · x2y SDK

Security professionals

Endpoint scanning, secret detection and offline 2FA — a portable kit that works in air-gapped rooms and never phones home, on open engines you can audit.

→ AV Ultimate · Code Leak Detector
→ Authenticator

Enterprises & compliance

Zero telemetry simplifies data-residency and privacy review. Signed releases, pinned engines and auditable behaviour — the shortest “how is data handled?” answer in the industry.

Talk to us

→ Full suite · SDK integration
→ Deployment & audit guidance

04 · Developer ecosystem

Programmatic, portable, public.

The x2y SDK exposes the same engines our desktop tools use — monitoring, refactoring, secret scanning and audits — as plain Node.js modules. Sources, releases and package metadata are public.

// scan a working tree for leaked secrets
import { secrets } from "x2y-dev-tools-sdk";

const report = await secrets.scan("./src", {
  rules:   "strict",      // 412 patterns, offline
  egress:  "local-only",
});

console.log(report);
// → { leaks: 0, rules: 412, runtime: "node:22" }

SDK modules
monitor	uptime, latency & alert probes
refactor	AST-level code transforms
secrets	local secret & token scanning
audit	integrity & dependency checks

05 · Release history

A public record, from first commit to free suite.

05 / 07

OCT 2025
Founded in Nairobi
x2y Devs Tools is established by Moses Gitiriku on 14 October 2025. The first commits of what becomes AV Ultimate land the same month.
DEC 2025
AV Ultimate v7.0.0
New detection pipeline and integrity monitor ship for Windows 10/11.
MAR 2026
Authenticator v1.0.0 · AV Ultimate v8.5.0
The offline 2FA vault launches on Android, while AV Ultimate v8.5.0 adds refreshed threat intel and a hardened installer.
Q2 2026
Four-tool release wave
SiteDirective v2.0.0 · Extractor v2.1.0 · Devs Pad v2.0.0 · GitIgnore Generator v1.0.
JUN 2026
Code Leak Detector v2.0.5
Expanded rule packs and CI-friendly reporting for the local secret scanner.
JUL 2026
The entire suite goes free
Every paywall is removed across itch.io, Microsoft Store and GitHub. The suite becomes donationware.
SEP 2026
Code Leak Detector → one-time $29
On 1 September 2026 the Code Leak Detector returns to a single one-time purchase. Every other tool remains free.

06 · Company

An independent collective, answering to users only.

x2y Devs Tools Ltd is an independent software company based in Nairobi, Kenya. What began in October 2025 as a single antivirus experiment has grown into an eight-tool suite for developers and security professionals.

In July 2026 we removed every paywall and made the full lineup free. The model is simple: donationware, open engines, signed releases — and a standing commitment that your data never leaves your machine.

“Software should answer to its user, not to a dashboard. We build tools that work when the network is off — because that is the only honest guarantee.”
— MOSES GITIRIKU · FOUNDER & ENGINEER

About the company Partners & ecosystem

Company facts
Founded	14 October 2025
Founder	Moses Gitiriku
Headquarters	Nairobi, Kenya
Model	Donationware · free since Jul 2026
Products	8 — Windows · Android · Node.js
Telemetry to date	0 bytes

NAIROBI, KENYA · 1°17′S 36°49′E · EAT (UTC+3)

Documentation

Build on the offline stack.

Every tool ships with documentation, signed releases and a public changelog. The SDK adds programmatic access to monitoring, refactoring and scanning — all local, all documented.

Read the docs SDK reference

Product docsx2ydevs.xyz
SDK referencesdk.x2ydevs.xyz
npm packagex2y-dev-tools-sdk
Release channelGitHub · signed
Current AV buildv8.5.0 · Win 10/11