PeerHold

One file to run. One file to keep.

Portable offline tools for sysadmins and security teams. A binary that needs no installation, data you can read and take with you, and a set of commands you can run to verify both for yourself.

Portable binaries

One compiled file. No installer, no runtime, no package manager, no admin rights. Run it from a USB stick; delete it and it is gone.

ldd ./app

Portable data you control

Whatever a tool keeps is plain JSON on your own disk, in a documented format. Read it, diff it, commit it, carry it to another machine. A tool that keeps nothing says so, and you can check that too.

cat your-data.json

Verifiable from outside

Proprietary software you can still verify. You cannot read the source; you can watch what the application actually does, and we publish the commands for it.

tcpdump -i any host not 127.0.0.1

What follows from that

  • No account. We never learn your name or your email.
  • No server. Nothing to breach, shut down, or stop working if we do.
  • No telemetry. No crash reports, no usage pings, no analytics.
  • No outbound requests. Not even an update check.
  • No execution. Our tools move text around. You decide what runs.
  • No ads, no tokens, no upsell. Free, and staying that way.

Products

cmdbin icon
Available now · Linux · macOS · Windows · ARM

Nobody can type kubectl on a small screen. cmdbin serves your command library to the screen you're holding. Pick a command, fill the blanks in a form, copy it finished.

Download cmdbin How it works Try it in the browser
pastebridge icon
Available now · Linux · macOS · Windows · ARM

The error is on one screen. The answer is on another. Pipe or paste output to the machine where you're working, read it on a real keyboard, and send the command back with a copy button instead of retyping it.

Download pastebridge How it works Try it in the browser

More in progress…

Check it The source is closed. The claims don't have to be. Substitute the binary name for ./app.

Run these from your own terminal. None of them needs the source. 

# Portable binary: nothing linked in, nothing installed.
ldd ./app

# Portable data: whatever it holds, you can read.
cat your-data.json

# Offline: it works identically with no network at all, loopback only.
unshare -rn sh -c 'ip link set lo up; exec ./app'

# Nothing goes out. Expect zero outbound packets from the app, including at startup.
# Other programs will show up, and so will your own devices while sharing is on.
sudo tcpdump -i any -n 'not (host 127.0.0.1 or host ::1) and not port 22'

# Nothing listens beyond loopback until you switch sharing on yourself.
ss -ltnp

Tool-specific checks: cmdbin and pastebridge. The same commands ship in each app's About panel, for machines that never reach this site.

A claim with no command next to it is untested. Treat it that way.

The license Free to use. Not open source. Full text inside each app.

  • Install and use on any number of devices you own, for personal or internal business use, free of charge
  • Pass the binary on, provided it's unmodified, complete with its notices, and free of charge
  • No modifying, no derivative works, no reverse engineering — except where your local law says otherwise and won't let that be contracted away
  • Your files stay yours, readable, and unaffected if the license ends

The full text, privacy notes and imprint are inside every app, offline, each with a version and date.

Follow releases RSS. No signup.

New versions and checksum changes go out here, plus the occasional note.

feed.xml
Open the feed

A plain file with no tracking attached. Whoever serves the copy you are reading may keep ordinary access logs.

Support the work

Everything here is free, and staying that way. If something saved you an afternoon, send some BTC.

Found a bug? Open an issue on GitHub for cmdbin or pastebridge, or find me on Bluesky at @peerhold.