35.90°N 14.51°E · Malta

Built like
a bastion.

Five apps that keep your data where it belongs: on your devices, encrypted, and out of everyone else's business. No analytics, no accounts, no subscriptions. Designed and engineered in Malta by one person who reads every support email.

guest@bastion: ~
5private apps
0trackers or analytics
0accounts to create
0subscriptions
The workshop

The apps

Each one does one job properly, keeps your data on your side, and has its own website with the full tour, support and privacy policy.

SSH and SFTP client

Shellway

SSH with nothing to leak.

A fast SSH and SFTP client for people who live in a terminal. Your hosts, keys and passwords sit in one vault, encrypted on your device and synced only through your own iCloud.

  • Tabs, split panes, snippets and a command palette
  • Two-pane SFTP with drag and drop
  • Local, remote and SOCKS port forwards
  • Jump hosts, Ed25519 and RSA keys, strict host-key checks
  • Face ID and Touch ID unlock
  • Optional AI command help with your own API key
  • Mac
  • iPhone
  • iPhone Duo
  • iPad

Coming soon to the App Store Free for unlimited hosts. Pro is a one-time purchase.

Shellway on the Mac with two terminal panes and the snippets panel
Shellway on the cover screen of a folded iPhone Duo
Period and cycle tracker

Moonkeep

Your cycle, kept private.

A period and cycle tracker that keeps everything encrypted on your own iPhone. No account, no cloud and no ads, with predictions that explain how they were worked out.

  • Predictions with an honest window and "Why this date?"
  • Your four phases, with movement and food ideas
  • Works with Apple Health
  • Apple Watch app with complications, and widgets
  • Discreet mode with neutral icons
  • A one-page doctor report, made on your iPhone
  • iPhone
  • iPhone Duo
  • iPad
  • Apple Watch

Coming soon to the App Store Free with unlimited history. Moonkeep Plus is a one-time purchase, with Family Sharing.

Moonkeep Today screen showing cycle day 24 and the next period
Moonkeep on Apple Watch: cycle day 24, period in 5 days
Private photo library

VEIL Photos

Your moments. Your privacy.

A calm home for your photos and videos, with a private library only you can open. It is encrypted on your device and opened with your passphrase or Face ID. Nobody else holds a key.

  • Private library encrypted with AES-256 on your device
  • One lock screen for every library
  • An alternate library with its own passphrase
  • Videos play straight from encrypted storage
  • Imports checked before any original is removed
  • Optional iCloud backups, encrypted before they leave
  • iPhone
  • iPhone Duo
  • iPad
  • Mac

Coming soon to the App Store Free app. VEIL Plus is a one-time purchase, with Family Sharing.

VEIL library on iPad with sample pictures
VEIL library on iPhone with sample pictures
Database app

SQLAtlas

No analytics. Your data stays yours.

A database app for SQL Server, Azure SQL, MySQL, MariaDB, PostgreSQL and SQLite. SQL Server on your Mac with no Windows VM, and nothing leaves your computer unless you send it.

  • Five engines and Azure SQL in one window
  • The Integrity Guard: no silent overwrites
  • Values shown exactly as stored
  • Convert SQL Server to MySQL with nothing lost silently
  • Passwords only in your system keychain
  • AI assistant off until you turn it on
  • Mac
  • iPad
  • iPhone
  • iPhone Duo
  • Windows
  • Linux

Coming soon to the App Store, Windows and Linux Free app. Pro is a one-time unlock.

SQLAtlas reviewing a staged edit before it runs, with sample data
Encrypted cloud vault

Sealkeep

Your files. Your keys. Your control.

Encrypts your files on your own device before they reach cloud storage. Keep using Dropbox, OneDrive, Google Drive or Nextcloud. Only you can open what you put there.

  • File names, folders and timestamps encrypted too
  • Works with any folder your cloud already syncs
  • Password plus an optional keyfile
  • Every version kept, tampering detected
  • Desktop app and command line
  • Reading and exporting are always free
  • Windows
  • Mac
  • Linux
  • iPhone · planned
  • iPhone Duo · planned
  • iPad · planned
  • Android · planned

Coming soon for Windows, Mac and Linux Free to read and export, forever. Pro is a one-time unlock.

Sealkeep showing an unlocked vault and a file's version history, with sample files
Sealkeep phone layout listing vaults (phone apps are planned)
Every screen you carry

Made for every Apple device you own

Every iPhone app is built for iPhone, iPhone Duo and iPad from the first release, with the Mac and Apple Watch where they make sense.

Shellway on the cover screen of a folded iPhone Duo
Moonkeep on iPad in light mode, showing cycle day 24
iPhone Duo ready

Folded or open, it fits.

On the iPhone Duo's narrow cover screen you get a compact layout made for one thumb. Open it up and the apps spread out with more room, like they do on iPad.

  • Shellway on the cover screen, shown here, with the key bar under your thumb
  • Moonkeep spreads into two columns on iPad and an unfolded iPhone Duo
  • iPad apps work in Split View and Slide Over
  • Moonkeep adds an Apple Watch app and widgets
Which devices each app runs on
AppMaciPhoneiPhone DuoiPadApple WatchWindowsLinuxAndroid
ShellwayYesYesYesYesNoNoNoNo
MoonkeepNoYesYesYesYesNoNoNo
VEIL PhotosYesYesYesYesNoNoNoNo
SQLAtlasYesYesYesYesNoYesYesNo
SealkeepYesplannedplannedplannedNoYesYesplanned

Sealkeep's iPhone, iPad and Android apps are planned and not released yet. SQLAtlas and Sealkeep also run on Windows and Linux.

How I build

The bastion rules

Six promises that hold for every app, today and in every update.

No analytics, no trackers

None of my apps has analytics, advertising or crash-reporting code. I don't know who you are, and I don't want to.

No account to make

No sign-up, no email address, no password to reset. Install the app and start.

Encrypted on your device

Your data is encrypted before it is saved, with keys that come from you. There's no server of mine that could unlock it.

Pay once, keep it

Every app is free to start, with a one-time unlock for the extras. No subscriptions, nothing to cancel.

Your iCloud, your choice

Where an app syncs or backs up through iCloud, it's your own iCloud, and the data is encrypted before it leaves the device. It's always optional.

Support reports you control

Need help? Each app can write a short report of its version and settings. You read it first and send it yourself. It never contains your data.

We earn your purchase. We don’t demand your dependence.

Pay for what you consume. Own what you purchase.

Nicholas Xerri
About

Hi, I'm Nicholas.

I've spent almost twenty years keeping networks, firewalls and Linux servers standing in places where downtime was never an option.

That work taught me to plan for things going wrong, to keep secrets secret, and to make tools that behave the same way every time. These apps are where I put that experience to use for everyone else: an SSH client I always wanted for myself, a database tool that never touches your data behind your back, and private places for your photos, your files and your health.

When I'm not writing code I'm usually out on the island somewhere, probably near a wall that's older than most countries.

2006First day in network operations
~20Years in banking, iGaming and government infrastructure
316 km²Size of the island nation it's all built on
0Trackers in any of my apps
Need help with servers, networks or firewalls for your business? Proton IT Services →
Why a bastion

Malta held.

In 1565 a small garrison on a small island held its walls through a four-month siege by one of the largest armies of its day. A year later they started building Valletta, a whole city designed around one idea: assume someone will try to get in, and make sure they can't.

That's the brief for every app I ship. The eight-pointed cross on each one comes from the same island, and the same stubbornness.

Support and privacy

Need a hand?

Each app's website has its own help pages and privacy policy. If those don't answer it, email me.