How it works Builder Why isolation Use cases FAQ Quick start Open on GitHub
Skip intro ↓
01 / Disposable compute

Disposable desktops.
Zero traces left.

Design, customize and launch disposable MicroVM desktops with complete identity isolation. Every session boots a brand-new profile — then vanishes.

02 / One click

One click. A fresh machine boots.

Pick a pre-configured profile and it launches instantly. The app runs a local server and opens in your browser — no external daemon required for the UI.

03 / Identity isolation

A new identity, every session.

MAC address, hostname, machine ID, BIOS strings and disk serial are all regenerated with cryptographically secure randomness. Nothing correlates run to run.

MAC02:9f:4c:e1:7a:d3
hostnameamber-harbor-41
machine-id8f3c…d20a
04 / Network modes

Route it your way.

Choose how each machine reaches the world — or whether it can at all — per build.

TorVPNDirectOffline
05 / Full isolation

Nothing leaks between runs.

Every machine is a sealed MicroVM in its own lane — QEMU everywhere, Firecracker and Cloud Hypervisor on Linux for lightning-fast boots.

06 / Dispose

Close it. It's gone.

When you're done, the machine dissolves — and the next session starts pristine. Export it first as a .bbx bundle or a standalone .exe if you want to keep it.

Disposable compute

Disposable desktops.
Zero traces left.

Design, customize and launch disposable MicroVM desktops with complete identity isolation. Every session boots a brand-new profile — then vanishes.

How it works

Three moves from idea to gone.

No setup rituals. Configure once, launch instantly, and let the machine erase itself when you close it.

1 · Configure

Pick a ready-made profile or design your own — OS, network mode, resources, tools and security policy.

2 · Launch

One click boots a fresh MicroVM with a brand-new identity. The UI opens in your browser — no daemon required.

3 · Dispose

Close the session and it vanishes without a trace — or export it first as a .bbx bundle or standalone .exe.

Custom builder

Every machine, assembled layer by layer.

Scroll to take a build apart — six choices stack into one disposable desktop.

1Operating system

Distro, desktop and browser — Alpine, Ubuntu, Debian, Kali, Fedora or Arch.

2Network

Tor, VPN, direct or fully offline — chosen per build and validated on import.

3Resources

CPU cores, memory and disk, dialed in within safe validated ranges.

4Tools

Preload from 30+ security and development tools and browser extensions.

5Design

Icon, theme and category so the machine is easy to find later.

6Security

Policies and idle timeouts — then save, export a bundle, or generate an executable.

Built-in profiles

Five ready-made machines, one click away.

tor_browser

Tor Browser

Anonymous browsing through the Tor network on a minimal Alpine base.

TorAlpine
suspicious_file

Suspicious File

Open untrusted files safely, fully air-gapped for malware analysis.

OfflineUbuntu
tools_box

Tools Box

A full pentesting environment on Kali with a direct connection.

DirectKali
offline_vault

Offline Vault

Air-gapped Debian for sensitive work that must never touch a network.

OfflineDebian
ai_agent

AI Agent

An isolated runner for AI tasks on Ubuntu with a direct connection.

DirectUbuntu
Why isolation

Your real machine remembers everything.

Every site, file and login leaves a trail on your daily computer. A disposable MicroVM keeps all of it in a sealed box you can throw away.

Your real machine

  • Cookies, history and logins persist across everything you do
  • A hardware fingerprint that follows you site to site
  • One risky file can touch your real data
  • Cleanup is manual, partial and easy to forget

A Brmel MicroVM

  • Fresh profile every session — nothing carries over
  • Randomized identity: MAC, hostname, machine ID, BIOS, disk serial
  • Untrusted files stay sealed inside the VM, air-gapped if you choose
  • Close it and it's gone — cleanup is automatic and total
Available tools

A stocked arsenal, picked at build time.

Choose exactly what goes into each image — nothing more, nothing less.

Brmel Builder is made for defensive research, malware analysis and authorized security testing on systems you own or are permitted to test. Use it responsibly and within the law.

Browser extensions

uBlock OriginPrivacy BadgerDecentraleyesNoScriptCookie AutoDeleteBitwardenWappalyzerHackToolsCookie Editor
Use cases

One tool for every throwaway job.

Malware analysis

Detonate and inspect suspicious files in a sealed, air-gapped machine that you delete afterward.

Anonymous research

Browse through Tor with a fresh fingerprint every session — no history, no correlation.

Isolated AI agents

Give autonomous agents their own disposable desktop so they can't touch your real environment.

Pentesting

A full Kali toolbox on demand, wiped clean between engagements so nothing bleeds across clients.

Sensitive work

Handle confidential material fully offline in an air-gapped vault that leaves no local footprint.

Open suspicious links

Click the risky link inside a throwaway machine instead of on the computer you actually rely on.

0Selectable tools
0Hypervisor backends
0Linux distributions
0Platforms supported
FAQ

Questions, answered.

A lightweight virtual machine that boots in seconds with a brand-new profile and identity. You work inside it, and when you close it the whole machine — files, cookies, traces — is gone.
Windows, macOS and Linux. It uses QEMU on every platform, plus Firecracker and Cloud Hypervisor on Linux for lightning-fast MicroVMs.
No. Design Mode lets you explore the full interface and build configurations without any hypervisor. You only need QEMU, Firecracker or Cloud Hypervisor when you actually run a VM.
Each session regenerates the MAC address, hostname, machine ID, BIOS strings and disk serial using cryptographically secure randomness, so nothing can be correlated between runs.
Yes. Export any session as a shareable .bbx bundle, or generate a standalone self-extracting .exe that carries the whole VM with it.
Yes — Brmel Builder is open source under the MIT license.
Quick start

Clone, build, launch.

The app starts a local HTTP server and opens your browser automatically. No external daemon required for the UI.

Go 1.22+ & Node.js 18+ — to build
QEMU, Firecracker or Cloud Hypervisor — optional, to run VMs
KVM support on Linux — for hardware acceleration
# Clone the repo
$ git clone https://github.com/Priv8-ai/brmel-codex
$ cd brmel-codex

# Install dependencies
$ make deps

# Build and run
$ make build
$ ./build/bin/brmel-builder

Spin up a machine. Leave nothing behind.

Free and open source under the MIT license. Build your first disposable desktop today.