HiddenForge

HiddenForge runs a Tor onion service (a .onion site) inside a locked-down container, so the machine hosting your site never has to be exposed to the internet. You point it at your web app, it hands you a .onion address, and your visitors reach you over Tor.

It ships with the safety settings already turned on: the guard-protection addon (Vanguards), Tor's built-in sandbox, proof-of-work flood defenses, a read-only filesystem, and dependencies pinned down to the exact byte. You don't have to be a Tor expert to run it safely, but this wiki explains what every piece does so you can trust it rather than take our word for it.

Start here

• What HiddenForge Is: what problem it solves, and who it's for.
• Quickstart: get a working .onion in a few minutes.
• How It Works: what actually happens from container start to a live address.

Going deeper

• The Security Model: what protects you, and the honest limits.
• Verifying the Image: check the image is really ours before you run it.
• Backing Up Your Onion Address: don't lose your address.
• Upgrading Safely: move to a new version, keep the same address.
• Running Multiple Services: several .onion sites from one container.

When something's wrong

• Troubleshooting: the usual problems and their fixes.
• OPSEC: Mistakes That Deanonymize You: the errors that undo all of this.
• FAQ: quick answers.