Usage

Once installed and running, OCCLUDE operates transparently. All outbound connections from the host are automatically normalized to match the active profile. No application changes are needed.

Starting the daemon

On Linux, OCCLUDE runs as a systemd service. It starts automatically after installation. To check its status:

occlude status

This shows the active profile, uptime, rewrite count, and any warnings. For a real-time view of rewrites happening on the wire:

occlude status --watch

Switching profiles

Profiles define the fingerprint target. To switch to a different profile:

occlude profile set chrome-132
occlude reload

The change takes effect for new connections immediately. Existing connections are not disrupted.

Verifying your fingerprint

OCCLUDE includes a built-in verification tool that checks your outbound fingerprint against the target profile:

occlude verify --local    # Check local stack settings
occlude verify            # Full remote verification (Pro)