Subgraph OS is a Debian-based Linux distribution and offers security services anonymous web browsing with hardening features.
Subgraph OS uses a hardened Linux kernel, and an application firewall which helps you block specific executables from accessing the network. Distribution forces all of your Internet traffic to go through the Tor network. 
The file manager (file manager) of the distribution has tools for removing metadata left by files and integrates with the OnionShare file sharing application. icedove e-mail client automatically works with Enigmail to encrypt your e-mails.
Most of the Subgraph OS code was written in Golang, which is a memory-safe language. The Golang libraries are also written in pure Golang, unlike other popular languages like Python. While the Python runtime can safe in memory, C languages commonly used by libraries expose tools written in Python to old memory corruption vulnerabilities.
One of the best security features of the distribution is that it uses Sandboxed applications in addition to the above.
So fragile or Internet-exposed applications work in sandbox environments. The sandbox framework, called Oz, is designed to isolate applications from the rest of the system. Access to system resources is only granted to applications in need. For example, PDF viewer and image viewer can not access any network interface from the sandbox.
Sandboxed applications are:
Web Browser
Email client with built-in support for encryption
CoyIM instant messenger
LibreOffice productivity suite
PDF viewer
Image viewer
Video player
Hexchat
Let's say that distribution offers several interesting features, but it's new. New distribution means we do not know what kind of support it offers, or whether it will continue to exist after 1 with 2 years.
Subgraph OS System Requirements
Anything that can comfortably run GNOME 3:
- 64-bit machine (Core2Duo or over)
- 2GB of RAM (4GB recommended - 4GB minimum for live mode)
- At least 20GB of hard disk space
Intel Integrated graphics cards or NVidia cards supported by the Nouveau drivers are recommended.
Subgraph OS Download
- subgraph-os-alpha_2016-12-30_1.iso (sha256sum) (signature) (releasenotes)
- Also available via our Tor hidden service: subgraph-os-alpha_2016-12-30_1.iso (sha256sum) (signature) (releasenotes)
- You can also download it via bittorrent
If you are interested in the project you can read more of the official website.
