Media kit
Everything needed to write about ProxyX: boilerplate, facts with their sources, logos, colors and media. Every file is served from this site. ProxyX is for security research use only; please keep that framing and write the name as ProxyX.
Brand kit
proxyx-brand-kit.zip
10 SVG files · 31.1 KiB (31885 bytes)
SHA-256
06894063f8e016d4ecf09b31cf4b9fe6b0e98278a454f46301b8f218342d73aa
01Boilerplate
Two versions of the same description, based on the project repository. Use either as is.
Short · 41 words
ProxyX is an AI/LLM-native proxy platform from NoxRed Security Research for authorized security research: provider pools, multi-IP edge proxying and session capture. Its MCP server is read-only by default, with human approval and an audit log. Security research use only. AGPL-3.0-only.
Long · 127 words
ProxyX is a next-generation AI/LLM-native Rust proxy platform from NoxRed Security Research for authorized security research. The pool gateway leases upstream IPs with sticky sessions, provider adapters, policies and budgets. A database-less edge proxy serves a host’s own addresses. The separate session proxy intercepts authorized TLS traffic and captures HTTP/1.1, HTTP/2 and WebSocket exchanges. The control plane offers sessions, API keys and a query DSL over REST and GraphQL. Choose PostgreSQL, MariaDB or single-host SQLite; ClickHouse or OpenSearch/Elasticsearch; Redis Streams, Kafka or RabbitMQ. ClickHouse supports Parquet exports. An MCP server over stdio and HTTP monitors and manages the platform, read-only by default, with human approval and an audit log. Doctor, pool assessment, monitoring assets, runbooks, deployment examples and benchmark tools support operation. Security research use only. AGPL-3.0-only.
02Fact sheet
Only verified facts are listed, and each names where it comes from. Fields that are not known are left out.
| Field | Value | Source |
|---|---|---|
| Name | ProxyX; commands and crate names use lowercase proxyx. | README.md; Cargo.toml |
| What it is | A next-generation AI/LLM-native Rust proxy platform for authorized security research. Security research use only. | README.md; docs/ai.md |
| Website | proxyx.dev | Cargo.toml (homepage) |
| Repository | github.com/noxred-research/proxyx (currently private; access requires organization membership) | Cargo.toml (repository); project publication state |
| License | GNU AGPL version 3 only (AGPL-3.0-only), not “version 3 or later”. Dependencies retain their own licenses. | LICENSE; README.md (License) |
| Implementation and release | Rust; 0.1.0, pre-1.0. Build from source; no prebuilt binaries, images or crates.io packages are published. | README.md (Quick start, Roles); CHANGELOG.md |
| Processes | proxyx runs gateway, warmer, edge, control, migration, MCP and limiter roles. proxyx-intercept is separate; proxyx-mcp can run MCP independently. | README.md (Roles); docs/mcp.md |
| Pool gateway | HTTP CONNECT and SOCKS5; org-key password and px selector username; provider adapters, static/mobile/customer upstreams, sticky leases, budgets, fair use, blocks and breakers; endpoint generation, session listing and force rotation. TTL/strict selectors, connection-scoped rotating dial races and HTTPS provider-hop CONNECT are documented. Worked adapters include Webshare and Bright Data; per-request endpoints are not stable pooled exits. Not a plain-HTTP forward proxy. | docs/gateway.md; docs/providers.md; docs/policies.md |
| Warmer and verifier | Exit-IP quorum, optional IPQS/AbuseIPDB/Scamalytics scoring, light probes, rotating keepalive, static rechecks, mobile resets, sweeper and optional Chromium prober. | docs/providers.md |
| Edge proxy | Self-hosted multi-IP HTTP/CONNECT and SOCKS4/4a/5, UDP ASSOCIATE, mixed/TLS listeners, SOCKS5 BIND, PROXY protocol, egress strategies, htpasswd, ACLs, limits, parent routing and multi-hop chains, fifo/hash/race/latency/CARP selection, backups and fail_timeout, end-to-end probes, TTL/capacity stick tables with optional Redis sharing, JSON/CSV ops stats, HTTP/2 CONNECT, staged ACLs, named-ACL request/response header rewrites, access logs and SIGHUP reload. No database; optional Redis for shared path affinity. | docs/edge-proxy.md |
| Session proxy | Session-UUID credentials, scoped TLS interception with a deployment CA, browser TLS profiles, HTTP/1.1/2 and WebSocket capture, header injection, private overrides, chaining, org rate limits and upstream breakers. | docs/session-proxy.md |
| Control plane | Session lifecycle, org API keys, typed traffic query DSL over REST and GraphQL, request limits and ClickHouse-backed Parquet exports with signed downloads. | docs/control-api.md; docs/capture-stores.md |
| Relational databases | PostgreSQL (default), MariaDB 10.6+ or SQLite on one host. MySQL itself is not supported. Separate pool/control schemas and versioned migrations. | docs/databases.md |
| Capture stores | ClickHouse (default), OpenSearch 2.x or Elasticsearch 8. Search stores write idempotently but do not support Parquet exports; some DSL constructs differ. | docs/capture-stores.md |
| Capture brokers | Redis Streams, Apache Kafka/Kafka-compatible brokers or RabbitMQ quorum queues. At-least-once delivery, source-key ordering and acknowledgement after store writes; retry exhaustion can drop captures. Redis/Valkey remains needed for hot/session state. | docs/capture-pipeline.md |
| AI/LLM-native | MCP over stdio and streamable HTTP; monitoring, management and validated config changes. Read-only by default, opt-in capabilities, human approval and hash-chained audit log. Optional OpenAI-compatible LLM tools summarize traffic, classify block pages and draft policies. | docs/mcp.md; docs/ai.md |
| Operations | Doctor and pool assessment, health/readiness, Prometheus rules, Grafana dashboard, runbooks, OpenTelemetry, optional Sentry, systemd, development Docker Compose, benchmark tools, in-memory limiter service and Rust client crate. | docs/doctor.md; docs/monitoring.md; docs/operations.md; docs/benchmarks.md |
| Works with | CrawlX accepts the pool gateway URL through its --proxy option; sticky keys and authenticated CONNECT block-signal feedback are available without relaxing either tool’s safety rules. | README.md (Use with sibling crawler); docs/gateway.md |
| Owner and publisher | NoxRed Security Research (also on GitHub) | Project owner; this site |
03Logos
Two sets are provided: the logo and banner (blue–violet gradient), and the mark used on this site (green). Each is shown on the background it is designed for.
The logo, banner and architecture files use live <text> set in a
system font stack, so they render with whatever font the viewer has. For print or
fixed typography, export to PNG or convert text to outlines in your design tool before
use. Outlined files are not yet provided.
04Color
The site's design tokens in both themes. Contrast is the WCAG 2.x ratio of the color against that theme's page background, computed when the page is built.
| Token | Dark | Contrast | Copy dark | Light | Contrast | Copy light |
|---|---|---|---|---|---|---|
Accent (green)--accent | #4ADE9Crgb(74, 222, 156) | 11.78:1 | #0B7A4Frgb(11, 122, 79) | 4.97:1 | ||
Secondary accent (cyan)--accent-2 | #67E8F9rgb(103, 232, 249) | 13.97:1 | #0E7490rgb(14, 116, 144) | 4.96:1 | ||
Page background (ink)--bg | #060608rgb(6, 6, 8) | 1.00:1 | #F6F6F7rgb(246, 246, 247) | 1.00:1 | ||
Raised surface--bg-elev | #0B0B0Frgb(11, 11, 15) | 1.03:1 | #FFFFFFrgb(255, 255, 255) | 1.08:1 | ||
Text--fg | #F4F4F6rgb(244, 244, 246) | 18.43:1 | #0B0B0Frgb(11, 11, 15) | 18.19:1 | ||
Secondary text--fg-dim | #B9B9C2rgb(185, 185, 194) | 10.39:1 | #3B3B45rgb(59, 59, 69) | 10.25:1 | ||
Tertiary text--fg-faint | #8D8D98rgb(141, 141, 152) | 6.17:1 | #5D5D68rgb(93, 93, 104) | 6.02:1 | ||
Notice (amber)--warn | #F5C15Drgb(245, 193, 93) | 12.21:1 | #8A5A00rgb(138, 90, 0) | 5.49:1 |
| Color | Value | Contrast | Copy |
|---|---|---|---|
Gradient start (light logo)logo-light.svg | #0EA5E9rgb(14, 165, 233) | 2.48:1 on #EEF2FF | |
Gradient end (light logo)logo-light.svg | #7C3AEDrgb(124, 58, 237) | 5.10:1 on #EEF2FF | |
Wordmark (light logo)logo-light.svg | #0F172Argb(15, 23, 42) | 17.85:1 on #FFFFFF | |
Gradient start (dark logo)logo-dark.svg | #38BDF8rgb(56, 189, 248) | 7.86:1 on #141B3A | |
Gradient end (dark logo)logo-dark.svg | #A78BFArgb(167, 139, 250) | 6.19:1 on #141B3A | |
Wordmark (dark logo)logo-dark.svg | #F1F5F9rgb(241, 245, 249) | 17.93:1 on #0B0B0F |
05Typography
This site is set in two open-source variable fonts, both under the SIL Open Font License 1.1 and free to self-host.
Interface and headings. Weights 100–900.
Code, commands and data. Weights 100–800.
06Usage
Recommended guidelines. The examples below are the real logo files, transformed with CSS.
Do
Leave empty space of at least half the logo's height on every side. The dashed line marks it.
Do
On screen, do not set the logo narrower than 120 px (32 px high); in print, 30 mm.
Do
Use the light variant on light backgrounds and the dark variant on dark ones.
Don't
Do not change the colors, add gradients or apply filters.
Don't
Keep the original proportions. Do not stretch, skew or rotate the artwork.
Don't
Do not place a variant on a background it is not designed for, or on busy images.
07Media
Both files are free to download with the kit.
Architecture. Independent pool, edge and session data planes; MCP and control APIs; capture brokers and ingester; relational, Redis and capture-store backend choices. Edge needs no database. SQLite is single-host; Parquet exports require ClickHouse.
Download light architecture diagram Download dark architecture diagram
Terminal demo (animated). Source-build and configuration commands, selector-based gateway authentication, edge validation and the separate session binary. Commands are illustrative, not captured output; provision the deployment as described in the README first.
08Contact
No dedicated press contact is published yet. The project can be reached through its GitHub organization.
Vulnerabilities in ProxyX go through private vulnerability reporting ↗, not press channels.
ProxyX is owned and published by NoxRed Security Research. Source and the AGPL-3.0-only license are on GitHub.
