What's new in CYRONIX OS 1.5
The security release. A full audit of the running system, the kernel and the update service, with every finding fixed and shipped.
Hardened kernel
Yama ptrace restriction, restricted kernel logs, panic on oops, list-corruption detection, software PAN, branch-predictor hardening and SYN cookies. Symbol export, SysRq and memory-dump-on-crash removed.
USB restricted mode
A locked phone refuses new USB devices, enforced in the kernel. Nothing can be extracted or injected over a cable while you are away.
Lock-screen privacy
Notification content stays hidden until you unlock.
Erase after failed unlocks
Ten wrong attempts and the phone erases itself, run by the platform's own device-policy engine, behind a full warning.
Verify, then trust
Checks the update signing key, kernel settings, USB restriction, lock-screen privacy, developer options, Private DNS and radios. Exports a full report with one tap.
Hardened update server
TLS 1.2 minimum, HSTS, no sniffing, no referrer leakage, serves nothing but signed releases.
Security, built in
Not a layer on top. The protections below are part of the system image and visible in Security Center.
Encrypted by default
Full-disk encryption with hardware inline crypto is forced on. The data partition never mounts unencrypted.
SELinux enforcing, always
Every build, no permissive domains, no new domains added by CYRONIX.
System integrity
dm-verity with error correction on the system partition. No root, no set-uid helpers, nothing world-writable.
Auto-reboot when locked
Restart after a chosen time locked so the encryption keys leave memory. Your idle phone is at its strongest state.
Per-app network control
Cut any app off from Wi-Fi or mobile data with one switch, enforced by the kernel firewall.
Signed with private keys
Every release is signed with unique CYRONIX keys. Public test keys are never used, and the phone checks its own trust store for them.
Privacy, by default
CYRONIX OS sends nothing anywhere. Only System Update has internet access, and it talks to one server over HTTPS.
Privacy Dashboard
Which apps used the camera, microphone, location or clipboard in the last 24 hours, from the platform's own permission log.
Permission overview
Every app holding a sensitive permission on one screen. Tap to change it.
No Google unless you want it
Google apps are optional and never bundled. Proprietary apps are offered as Play Store links, never shipped.
Minimal logging
Short log buffers on release builds, no persistent logs, no crash reporting to anyone.
Designed as one system
A dark-first interface built for the AMOLED panel, from boot animation to lock screen.
CYRONIX design language
Dark palette, six accent colours, hexagon icon shape, and CYRONIX window and task transitions with a motion setting from full to off.
Aurora live wallpaper and wallpapers
An animated brand gradient that pauses when hidden, plus six original wallpapers.
System sounds
An original set: notification, ringtone, alarm and UI sounds.
Every language
Fully branded in all 50+ system languages.
Diagnostics
CPU, memory, storage, battery health, thermals, display, cameras and radios, plus interactive touch, display, sensor, audio, fingerprint and GNSS tests.
CYRONIX Settings
Appearance, performance profiles, reboot options and recommended apps, inside Settings > System.
Updates you can trust
Delivered by CYRONIX, verified by your phone.
| From anywhere | System Update reaches the CYRONIX update service over any internet connection, HTTPS only, TLS 1.2 and up. |
|---|---|
| Verified twice | SHA-256 from signed metadata, then the whole-package signature is checked against the CYRONIX release key before install, and again by the recovery. |
| Your recovery stays | "Keep my recovery" leaves CYRONIX Recovery OS in place across updates. |
| Release channel | Stable builds only, signed with private keys, with a public changelog. |
Get CYRONIX OS
Supported: OnePlus 3 (A3000, A3003) and OnePlus 3T (A3010). An unlocked bootloader is required.
Update the phone to OxygenOS 9.0.6 firmware first.
Flash CYRONIX Recovery OS: fastboot flash recovery recovery.img.
Format data, then adb sideload the CYRONIX OS package. Optionally add the Google package before first boot.
Later releases arrive through System Update, verified on the device.
Release packages are published on the CYRONIX update service and verified by checksum and signature on the device. The current release is CYRONIX OS 1.5.0 (22 September 2026).
- This hardware has no Verified Boot 2.0 and needs an unlocked bootloader; anyone with physical access can flash images. Encryption, USB restricted mode, auto-reboot and erase-after-failed-unlocks are the defences.
- The kernel is Linux 3.18 and the vendor firmware is from 2019. Fixes are backported by hand and patch levels are never inflated.
- The Wi-Fi driver does not support MAC randomisation.
Security you can measure.
Read how every protection works and how to verify it on your phone.
Security in depth