InterNos — Host your data and services

SideServices is now in alpha.

Mon, 01 Jun 2026 00:00:00 +0000

A private service mesh with deny-by-default access and post-quantum transport. One binary, every OS. Your services on localhost, from anywhere.

SidePhone is now in alpha.

Wed, 20 Apr 2022 00:00:00 +0000

Remote virtual Android phones, streamed to your device. We’ve been running it ourselves for a while. Now we’re opening it up.

About InterNos

Mon, 01 Jan 0001 00:00:00 +0000

What we build

InterNos is a small independent team. We ship two products — SidePhone and SideServices — and write about security and infrastructure.

Who we are

A small team. We answer every message ourselves.

Get in touch

Mon, 01 Jan 0001 00:00:00 +0000

Contact us

We’re a small team and we read every message.

If you’re interested in early access to SidePhone or SideServices, or if you have a question, a bug report, or just want to talk about the ideas behind the project — write to us.

info@sidephone.io

SidePhone

Mon, 01 Jan 0001 00:00:00 +0000

What is SidePhone?

SidePhone gives you remote virtual Android phones, streamed to your device. The virtual phone runs on your server — never alongside your personal apps. Every session is encrypted, and nothing work-related is stored on the physical handset.

Run as many phones as you need — work, on-call, projects — all in the same app. Switch between them without a reboot, without a second device.

The whole stack — manager, emulator images, and clients — is open source. Self-host it on your own infrastructure, or use our hosted service. No black box, no lock-in.

SideServices

Mon, 01 Jan 0001 00:00:00 +0000

What is SideServices?

SideServices is a private, self-hosted service mesh. Run the single sidehub binary on any device; your services become reachable from anywhere on localhost, with no public ports, no public DNS, and no vendor control plane involved.

Access is deny-by-default and per-service. A service stays invisible until your controller grants it to a specific peer — and is revoked the same way. Every decision is logged locally.

Transport is WireGuard with hybrid post-quantum key exchange (X25519 + ML-KEM, Ed25519 + ML-DSA). The relay is untrusted by design — it can’t read your traffic, so it can be anyone’s.