Pangolin Client vs SafeOpen

Pangolin is a fully open‑source, zero‑trust connectivity platform that provides encrypted, least‑privileged access to private applications and infrastructure without exposing public IP addresses or opening inbound ports. It works across on‑premise networks, cloud environments, and remote sites, eliminating the complexity and risk of traditional VPNs. Pangolin brings identity to the access layer, allowing you to control access to specific applications, services, or network ranges instead of entire networks. Users authenticate through trusted identity providers and can only reach the resources you explicitly allow, applying Zero Trust principles end‑to‑end. With lightweight site connectors, you can drop Pangolin into any network and instantly make hosts or entire network ranges securely accessible. Add as many networks as you need and connect to multiple sites at the same time, even behind restrictive firewalls or NAT. Pangolin’s internal DNS lets you assign friendly names to resources, so users never have to remember IP addresses. Users can access private web applications through browser‑based, identity‑aware reverse proxies with automatic SSL, routing, and health checks—no client required. For deeper access, Pangolin clients provide fast, reliable connections to SSH, databases, RDP, and private services. Pangolin can be fully self‑hosted for complete control, or you can use Pangolin Cloud for the quickest and easiest setup. With strong security, high performance, and minimal operational overhead, access is fully auditable, MFA can be enforced per resource, and applications require zero code or configuration changes.

SafeOpen tells you what's behind a QR code or link before you tap. Open it. Don't open it. You decide. That sticker on the parking meter, the gas pump, the bathroom door — you don't know where it goes. Could be a real menu. Could be a fake. Could be a phishing page. Could be malware. Kids especially scan first and think later. SafeOpen scans the code with your camera, shows you the destination URL, and runs a safety check on your device — looking for known phishing patterns (fake login pages, look-alike domains, urgent-action prompts, suspicious URL structure). You see a Risk Level (Low, Caution, High, Unknown) with a plain-English explanation. Then you decide whether to open. WHAT IT DOES • On-device risk scoring — your scan never leaves your phone • Camera scanner for QR codes • Paste-a-link checker for sketchy URLs from messages or email • Scan history kept locally (free for the last 10, unlimited with credits) • Optional AI page summary so you know what's there before you commit (credit packs) WHAT WE WON'T PRETEND TO DO • No third-party reputation database. We don't ping Google Safe Browsing or paid threat feeds. Verdicts are heuristic, on your device, based on URL and content patterns. Treat them as "should I be careful?" — not a guarantee. • No account. No login. No tracking. The scanner is free and uses no network. • No screenshot preview of the destination — that's a future release. CREDIT PACKS (optional — scanning is free) • Starter: 100 credits at $0.99 • Standard: 500 credits at $3.99 • Power: 2,000 credits at $9.99 1 credit = 1 AI page summary. Credits never expire. PRIVACY The scanner runs locally. No account, no email, no history kept off-device. AI summaries (when you spend a credit) fetch the page through our backend — that request is short-lived and not tied to your identity. Built by Katafract LLC. Part of the Enclave platform.