私有化部署的Signal。Signal,self-hosted.
军工级端到端加密 · 数据不出境 · 服务器无密钥Military-grade E2EE · Stays in your network · Server holds no keys
为不该被偷听的人而造。Built for those who can’t afford to be overheard.
高敏感、强合规、跨部门协作密集的场景，是 hostsig 的主战场。High-sensitivity, compliance-bound, cross-department workflows — this is the ground hostsig is built for.
政企 / 机关Government & Public Sector
整套系统部署在政务网内；明文与密钥只在用户终端，不进入任何服务器，满足自主可控要求。The system runs inside the government network. Plaintext and keys live only on user devices — never on any server. Meets sovereignty-control requirements.
律所Law Firms
当事人沟通、卷宗讨论端到端加密；律所自有服务器，律师特权信息不经第三方。End-to-end encrypted client conversations and case discussions; attorney-client privileged content never touches a third party.
投行 · 资管 · 私募Investment & Asset Management
撮合沟通、内幕讨论在你自己的服务器内完成，规避公网 IM 的合规与外泄风险。Deal flow and sensitive discussions stay on your own servers — avoiding the compliance and leakage exposure of public IM.
医疗 · 高敏感行业Healthcare & High-Sensitivity
医患沟通、临床协作端到端加密；明文只存在于使用者的终端上，任何服务器都看不到。Doctor-patient and clinical communications are end-to-end encrypted; plaintext lives only on user devices — invisible to every server.
上市公司董办 / 集团高管Listed Co. Board / Executives
财报前后窗口期、并购讨论、董事会议题，统一走自建通道，杜绝外泄。Pre-earnings windows, M&A discussions, board topics — all routed through your private channel; no leakage surface.
海外 / 跨境团队Cross-Border Teams
不受公网 IM 的境外管控；你的服务器，你选择的法域。Free from the regulatory reach of public IM. Your server, your jurisdiction.
公网 IM 不属于你。Public IM isn’t yours.
只有数据存在你自己的机器上、密钥握在你自己的设备里，才能真正谈"通讯隐私"。Communication privacy is real only when your data sits on your hardware and your keys stay on your devices.
公有 IMPublic IM
微信 / Telegram 等WeChat / Telegram / etc.
- 服务方可读消息Service can read messages
- 可被监管干预Subject to regulation
- 元数据外泄Metadata exposed
- 内容可被解密Content decryptable
官方 SignalPublic Signal
Signal MessengerSignal Messenger
- 端到端加密End-to-end encrypted
- 需跨境访问Cross-border access
- 需真实手机号Real phone number required
- 元数据最小化Metadata minimized
hostsighostsig
私有化部署Self-hosted
- 端到端加密End-to-end encrypted
- 完全在你的网络Fully within your network
- 自定义号段Custom numbering
- 服务器无密钥Server holds no keys
为不该被偷听的对话而造。Built for conversations that shouldn’t be overheard.
端到端加密End-to-End Encryption
Signal Protocol；前向 + 后向保密；服务器永远只转发密文。Signal Protocol with forward and backward secrecy. The server only ever relays ciphertext.
元数据最小化Metadata Minimization
Sealed Sender · 私密群组 · 私密联系人发现，服务器看不到通讯关系。Sealed Sender, private groups, private contact discovery — the server never sees the social graph.
客户端可审计Auditable Client
基于 Signal Android 开源版本改造，客户端代码完整可查。Built on the open-source Signal Android client; client code is fully inspectable.
外部无解密力Outside Can’t Decrypt
服务用到的 DNS、对象存储等外部组件只接触密文与寻址；密钥与明文只在用户终端，任何服务器都看不到。External components like DNS and object storage only ever touch ciphertext and addressing. Keys and plaintext live only on user devices — no server ever sees them.
Rust 服务端Rust Server
内存安全，响应迅速。Memory-safe and fast.
自定号段Custom Numbering
内部自由分配号码，不需要真实手机号即可注册。Assign internal numbers freely — no real phone number required to register.
一张图说清楚。One picture says it.
客户端在手机上完成所有加密；服务器只看到不可读的密文。整套系统跑在你的内网，单台 VPS 即可启动。All encryption happens on the phone. The server only sees unreadable ciphertext. The whole stack lives in your network and can start on a single VPS.
┌───────────────────┐ ┌───────────────────┐
│ CLIENT A │ │ CLIENT B │
│ Android │ │ Android │
│ │ │ │
│ keys live here │ │ keys live here │
└─────────┬─────────┘ └─────────┬─────────┘
│ │
│ ─────── TLS + Noise · encrypted envelope ───────
│ │
▼ ▼
┌──────────────────────────────────────────────────────────┐
│ │
│ YOUR SERVER ─ 1 box is enough │
│ │
│ message routing · discovery · groups │
│ │
│ ┄┄┄┄┄┄┄┄┄┄┄┄┄ holds no plaintext key ┄┄┄┄┄┄┄┄┄┄┄ │
│ │
└──────────────────────────────────────────────────────────┘
↑ keys & plaintext live only on user devices · no public domain needed ↑┌──────────────┐ │ CLIENT A │ │ keys local │ └──────┬───────┘ │ encrypted ▼ ┌──────────────┐ │ YOUR SERVER │ │ no key held │ └──────┬───────┘ ▲ encrypted │ ┌──────┴───────┐ │ CLIENT B │ │ keys local │ └──────────────┘
服务器从不掌握能解密的东西。The server never holds anything that can decrypt.
- 01
密钥诞生即留在设备Keys are born on the device — and stay there
每个用户的身份密钥、消息密钥都在手机本地生成，从未上送服务器。Identity and message keys are generated locally on each phone and are never uploaded to the server.
- 02
逐对独立密钥Per-pair independent keys
A 与 B、A 与 C 使用完全不同的会话密钥；攻破一对不影响其他。Every conversation pair uses an entirely distinct session key. Compromising one pair does not affect the others.
- 03
消息在离开手机前就已加密Messages are encrypted before they leave the phone
服务器永远只看到密文。即使日志全开，写到磁盘的也是不可读字节。The server only ever sees ciphertext. Even with full logging, what hits disk is unreadable bytes.
- 04
服务器被攻破，消息依然安全Even a breached server cannot decrypt
服务器从不持有用户的私钥、也不持有会话密钥。即便攻击者拿下整台机器、拷走全部磁盘、抓取全部日志，也无法解密任何一条历史或新发的消息。The server never holds users’ private keys or session keys. Even if an attacker seizes the entire machine, walks off with every disk, and exfiltrates every log, no historical or future message can be decrypted.
- 05
元数据最小化Metadata minimization
Sealed Sender 隐藏发件人；私密联系人发现让服务器看不到通讯录明文；私密群组让服务器不知道成员名单。Sealed Sender hides the sender. Private contact discovery prevents the server from seeing plaintext address books. Private groups conceal membership.
- 06
内存安全的服务端Memory-safe server
Rust 实现，从源头规避缓冲区溢出、UAF 等内存类漏洞。Implemented in Rust, eliminating buffer overflows, use-after-free, and similar memory-class vulnerabilities at the source.
* 本节描述消息侧的安全保证。其余辅助功能的安全级别等同官方 Signal 协议族。* This section describes message-layer guarantees. Auxiliary features inherit the security profile of the upstream Signal protocols.
两种节奏，一样的结果。Two paths, same outcome.
按授权用户数（50 / 100 / …）购买；超出后可升档，无需重新部署。Licensed by user count (50 / 100 / …). Exceeding the tier? Upgrade by email — no redeployment.
自助部署Self-Deploy
我们交付完整 Docker 镜像 + 部署手册We hand over Docker images + a full manual
- 服务端完整 Docker 镜像 · 开箱即用Complete server Docker images · ready to run
- 客户端 Android APKAndroid APK client
- 完整部署手册（中文）Step-by-step deployment manual
- 一次付费 · 永久授权One-time payment · perpetual license
我们部署We Deploy
推荐Recommended远程登录你的 VPS，调试至可用We remote into your VPS until it’s production-ready
- 远程登录你提供的 VPSWe connect to a VPS you provide
- 部署、连通、注册全程到位Deploy, connect, register — start to finish
- 现场调试至可用On-site debug until verified working
- 一次付费 · 永久授权One-time payment · perpetual license
先问，后答。Answers, up front.
01和官方 Signal 有什么区别？How does this differ from public Signal?
所有数据保存在你自己的服务器上，不依赖任何境外服务；身份验证不需要真实手机号；客户端经过适配以连接你的私有服务。All data stays on your own server with no foreign-service dependencies. Identities do not require a real phone number. The client is adapted to connect to your private deployment.
02现有 Signal 客户端能用吗？Can existing Signal clients connect?
不能。需要使用我们提供的 Android 客户端，它已配置为连接你的私有服务。No. You must use the Android client we provide, which is preconfigured for your private deployment.
03是否需要域名？Do I need a domain name?
不需要。可走 IP + 自签证书，或仅在内网直连。No. You can run on IP + self-signed certs, or purely on a private network.
04数据存哪里？能迁移吗？Where is data stored? Can I migrate it?
全部数据存在你购买/提供的服务器上。整机迁移、磁盘镜像都可以。All data stays on the server you supply. Full-machine migration and disk imaging are supported.
05我可以买多少用户的授权？How many users can I license?
按 50 / 100 / … 用户档位授权，邮件咨询具体价格。Licenses come in tiers of 50, 100, and beyond. Pricing on request via email.
06用户超过授权数怎么办？What happens if I exceed my user limit?
联系我们升档，无需重新部署。Email us to upgrade your tier — no redeployment required.
07客户端在哪下载？是否上架应用商店？Where can users get the client? Is it on app stores?
APK 通过专属链接交付给购买方。不上架公开应用商店。APKs are delivered to buyers via private links. They are not published on public app stores.
08是否支持 iOS？Is iOS supported?
当前仅 Android。iOS 在路线图中。Currently Android only. iOS is on the roadmap.
09服务端会随官方 Signal 升级吗？Will the server track upstream Signal updates?
维护期内每年至少 2 次升级，覆盖上游 Signal 的协议更新与重要安全修复。At least two upgrades per year during the maintenance period — covering upstream Signal protocol updates and critical security fixes.