Your Mac stays outside. What matters lives inside.
An isolated, encrypted workspace for Macs with Apple silicon: a pre-configured virtual machine with Tor routing and a curated set of privacy tools — working right out of the box.

Overview
Work and personal, separated
Define the boundaries yourself — without a second device.
Control over your information
A private hidden layer accessible only to you for your most sensitive data.
No technical background needed
Pre-configured, tested and built on community-verified open source.
Features
Isolation from telemetry
macOS doesn't see what you do inside the workspace.
Encrypted container
The system runs from a VeraCrypt container with an optional hidden layer.
Tor routing
Network traffic from the workspace is routed through Tor by default.
Protected network
The turnkey kit adds an OpenWrt router with VPN and ad blocking.
Safe file testing
Open suspicious files in an isolated environment, away from your main system.
Free and open
All instructions are public — build the same solution yourself at no cost.

How it works
An isolated virtual machine
A pre-configured Linux workspace runs in UTM on your Mac — macOS doesn't see what happens inside.
Encrypted storage
The workspace lives in an encrypted VeraCrypt container with a private hidden layer for the most sensitive data.
Private network
All traffic goes through Tor; the turnkey kit adds a protected router.
Configurations & pricing
Choose the option that suits you: build it yourself, have us set it up, or get a turnkey solution.
Build it yourself
Download the build and follow the step-by-step instructions.
- VirtualCatsOS image
- Step-by-step guide
- Community support
Setup on your Mac
We set up the workspace on your Mac remotely and walk you through it.
- Full installation and hardening
- Encrypted container with hidden layer
- Personal walkthrough
- 3 months of support

Turnkey MacBook
A new MacBook with VirtualCatsOS, protected router and all tools installed.
- MacBook Air M5 included
- VirtualCatsOS, Tor, VeraCrypt installed
- Protected OpenWrt router
- 12 months of support
Prices in USD. Shipping and taxes are calculated individually. Questions: mail@cakescats.com
Technical specifications
| Compatible Macs | Apple silicon (M1 and newer), 16 GB RAM recommended |
|---|---|
| Virtualisation | UTM |
| Guest system | Ubuntu Linux, hardened, with privacy tools |
| Encryption | VeraCrypt container with optional hidden volume |
| Network | Enforced Tor routing; OpenWrt router with VPN in the turnkey kit |
| iPhone / iPad | Limited support |
Frequently asked questions
Is it safe?
What is the hidden layer?
Is it software or a device?
Why Tor?
The CakesCats family
Every site and product in one place.






A private workspace on your Mac
Tell us your Mac model — we'll suggest the best option.