Vesper is a sovereign browser being built on Gecko, the one major browser engine that is both open source and independent of Google. For an enterprise that has to verify what its browser does, and to know that no foreign company governs the engine underneath it, that independence is the whole point. It will run standalone, or as the browser inside HyperGate’s containment.
Effectively the entire web runs on three browser engines. Blink, which Google develops and which powers Chromium and everything built on it, including Chrome, Edge, Brave, and Opera. WebKit, which Apple develops and ties to its platforms. And Gecko, which Mozilla develops and which powers Firefox.
The distinction that matters for a sovereign browser is not open versus closed. All three engines are open source. The distinction is governance: who sets the engine’s direction and decides where it goes. Blink’s roadmap is Google’s, WebKit’s is Apple’s. A browser built on Blink can be de-googled at the surface and still inherit Google’s control over the engine beneath it. Gecko is the one major engine that is both open source and independent of Google, which makes it the only credible open, non-Google base for a browser that claims sovereignty.
| Engine | Governed by | Open source |
|---|---|---|
| Blink | Open source | |
| WebKit | Apple | Open source |
| Gecko | Mozilla | Open source |
// all three are open source. The differentiator is who steers the engine, not whether you can read it.
Gecko is well-trodden ground for a hardened browser. Tor Browser and LibreWolf are both built on it.
Independence from Google’s engine governance is the sovereignty claim. Auditability is what makes that claim checkable rather than a promise.
An open, independent engine is one a customer can inspect, and one a certifier such as STQC can evaluate against its own requirements. The alternative is a vendor-controlled black box whose engine roadmap is set by a foreign company and whose internals you are asked to take on trust. For a bank, a government department, or a defense PSU, “trust us” is not an answer to a sovereignty requirement. “Here is the source, verify it” is.
What Vesper is being built to be, stated specifically. These describe design intent, not features available today.
Account sync, safe-browsing lookups, and the other phone-home services are not wired in.
The default search and suggestion endpoints do not point at Google.
Usage telemetry and the engine’s built-in data-reporting endpoints are stripped, not just disabled.
The background connectivity-check and captive-portal pings to external servers are removed.
De-googling is not a setting toggled on top of the browser. It is the removal of the connections themselves, so there is nothing to quietly switch back on.
Vesper is built to be managed centrally. Gecko carries a mature enterprise-policy foundation, the same mechanism organizations use to govern Firefox at scale, and Vesper builds on it: centralized policy and fleet management, so an administrator sets configuration and the endpoints follow it.
This is configuration and policy control. It is not data-loss prevention. DLP and content inspection live at HyperGate’s containment boundary, not inside the browser.
Vesper is in development. The Gecko base is a deliberate sovereignty stance, not a compatibility compromise: a browser an enterprise can verify and govern, built on the one open engine no foreign company controls. Join the early-access list and we will reach out as access opens. There is no software to download yet, and nothing on this page is offered as available today.