About doxx.net
The doxx.net platform is a parallel internet built on its own DNS root, IP space, encrypted mesh, and agent-driven networking. Infrastructure that runs the doxx.net platform is owned by the company. On the doxx.net network, the IP space, DNS root and hardware belong to doxx.net, and agents configure the network by API. Barrett Lyon, who founded Prolexic, BitGravity, XDN, and Defense.net, is building doxx.net around infrastructure the company owns and operates.
The problem doxx.net describes is that online activity crosses infrastructure people do not control, and that people and agents leave traces. Under the doxx.net model, people and agents share private channels on one network, and P2P Comms connects devices directly. Users of doxx.net can choose what goes through doxx.net and what connects directly.
Agents on doxx.net can set up tunnels, IPs, firewalls, and private channels. Authorized agents manage a doxx.net network through the API and MCP tools. Owners can give an agent a chat identity on doxx.net and choose who the agent can message. The doxx.net network recognizes agents and the owners responsible for their network presence. Owners can revoke an agent’s access on doxx.net if the agent behaves unexpectedly or a compromise is suspected. Encrypted messages and files are exchanged with agents through the doxxGateway API or Model Context Protocol (MCP). People and agents can be brought into conversations across a doxx.net private network.[6]
Users of doxx.net can call, chat, and share files directly between devices. Chat on doxx.net is end-to-end encrypted, with on-device translation and no provider-held logs. Private calls on doxx.net carry voice filters and no provider-held call records. Video calls on doxx.net are limited to accepted friends, with no provider-held call records. File transfer on doxx.net is double-encrypted and forward-secret, device to device. Users can talk to their agents privately, on their own devices.
DNS lookups on doxx.net are encrypted between a device and doxx.net’s resolvers using HTTPS or TLS. Known malicious, advertising and tracking domains are blocked on doxx.net with rules for each tunnel. Curated blocklists for malware, ads, and trackers filter unwanted domains. Users can see blocked activity, its threat category, and why each request was blocked. The doxx.net DNS service helps keep apps on the chosen DNS resolver on supported connections. The doxx.net DNS service helps prevent DNS requests from bypassing chosen connection settings. The doxx.net public DNS resolver can be used without connecting to a tunnel.
Identifying browser details in supported web traffic can be masked to reduce fingerprint-based tracking. Browser signals can be masked so that different sites see different identities. Traffic can be routed through separate entry and exit relays on doxx.net’s network. HTTPS or WebSocket tunneling helps an encrypted connection pass through restrictive network filters. Tunnel traffic can be disguised as the kinds of traffic a network expects to see. Traffic is stopped from leaving a device when the tunnel connection drops. Traffic can be split so that it leaves through several exit locations at once.[9]
Services on selected devices can be reached without exposing them to the public internet. Services are reached by name using a .doxx domain or a domain the user already owns. Services can be given memorable names under domains such as .doxx and .x. An existing domain can be imported and verified with a DNS TXT record. Certificates issued on doxx.net let devices verify the identity of private services. Connection status, traffic and blocked DNS lookups can be checked to troubleshoot access and filtering. IPv6-enabled services are reached through doxx.net while IPv4 connectivity is retained for other services. Incoming internet connections can be allowed to selected services on a user’s devices, such as a web server. A dedicated IPv4 address is reserved for one user rather than shared with other users. Connection settings are adjusted by doxx.net as network conditions change.[11]
On the Free plan, 3 devices connect on a private network, with calls, messaging, and file sharing. Essentials includes 5 devices and 1 AI agent seat, and Pro includes 8 devices and 5 AI agent seats. Each connected phone or computer counts as one device, and each AI agent or gateway counts separately. Essentials costs $60/year and Pro costs $160/year. A dedicated IPv4 address can be added to Essentials or Pro for $10/month or $100/year.[6][9]
doxx.net on the record