v1.0.0

OCCLUDE Documentation

OCCLUDE is a system-level daemon that normalizes your machine's network fingerprint. It intercepts outbound traffic and rewrites TCP, TLS, and HTTP/2 fields so that passive observers see a host indistinguishable from millions of others running the same profile.

Getting Started

New to OCCLUDE? Start with the installation guide, then follow the basic usage walkthrough. The daemon runs as a system service and requires no GUI.

Note OCCLUDE operates at the network layer. It does not modify application-level identifiers like cookies, canvas fingerprints, or browser headers. Use a hardened browser for that surface.

Documentation Sections

Install — Platform-specific installation for Linux, Windows, and from source. Systemd integration and initial configuration.

Usage — Starting the daemon, switching profiles, verifying your fingerprint, and understanding the output.

CLI Reference — Complete command reference for occlude and all subcommands.

Profiles — How profiles work, available profiles, creating custom profiles, and the profile TOML format.

Threat Model — What OCCLUDE protects against, what it doesn't, and how to think about its security boundary.

FAQ — Frequently asked questions about compatibility, performance, licensing, and troubleshooting.