Why the app is open source

Moorlock asks for a lot of trust. It runs on your machine with permission to lock it, shut it down, photograph whoever is in front of it, and report where it is. Software with that reach shouldn't ask you to take its word for anything — so the client is open source, every line of it.

Security software has to be auditable

A theft-protection agent is exactly the kind of program malware pretends to be: it watches sensors, captures the webcam, and phones home. The only honest answer to "how do I know it isn't spying on me?" is read it. You — or anyone you trust — can read the source, build it yourself, and verify the binary does exactly what this site says it does. Nothing is hidden behind a compiled blob.

You can see what leaves your machine

Every alert, every evidence upload, every location report is in the open. The client works fully on its own with your own alert channels — email, Signal, Slack, webhooks — and the cloud account is optional. When you do use the hosted console, the code shows you precisely what is sent and when. We're equally plain about the limits: evidence is encrypted at rest, and we say clearly that it is not end-to-end encrypted, rather than letting marketing outrun the architecture.

No lock-in, by construction

Moorlock is hardware-agnostic — any breakaway cable, FIDO2 key, phone, charger, or USB drive can be the tether — and the client never requires a subscription to protect you. If Moorlock the company disappeared tomorrow, the protection engine would keep working and the source would still be yours. That's not a promise; it's a property of the license (GPLv3).

Scrutiny makes it better

Theft detection is an adversarial problem: grace periods, duress PINs, evil-maid watch, clone-proof tethers. Designs like these get stronger when people try to break them in public. Issues, disclosures, and patches all happen in the open — and if you find a hole, we want to hear about it at security@moorlock.io.

What we charge for

The business model is the same shape as the code: the client is free and open source forever; the hosted console — encrypted evidence and location history, push alerts, remote actions, fleet management — is what you pay for. Charging for the service rather than the software means we never have a reason to close the client down.

Read the source on GitHub — or go back to the overview.