- input domains
- 125,934
- input file
- 2,567,029 B
Snapshot details
SHA-256
a074d7b166f176940204242765f64c0f23938180a034860bf0f489b7dbcee216Snapshot: 2026-10-13T21:48:28Z
Upstream data ↗KIARA / DATABASE
Know what is in the filter.
Three source roles. One compiled database. Counts, overlap and file sizes are published together so the numbers can be checked.
- unique domain rules
- 164,554
- mandatory threat-layer rules
- 111,087
- optional-profile rules
- 56,908
- compiled database
- 1.88 MiB
Snapshot: 13.10.2026 · generation 12 · A dated snapshot, not a live protection counter.
How the rules overlap
- Mandatory only
- 107,646
- In both layers
- 3,441
- Optional only
- 53,467
Mandatory and optional counts overlap. Adding them would count 3,441 rules twice. A rule can also cover subdomains, so this is not a count of every possible blocked hostname.
Source catalogue
Download public metrics JSON3 / 3
- input domains
- 56,908
- input file
- 1,193,710 B
Snapshot details
SHA-256
5e80f147669d7a55bdf94e73172d7a57eeee9bf2032be9bf633346562f3dfcf2Snapshot: 2026-10-13T21:48:28Z
Upstream data ↗Annotation only
HaGeZi TIF Mini
GPL-3.0 (upstream)
Source & documentation3,441 existing optional rules annotated
- input domains
- 235,818
- input file
- 4,260,438 B
Snapshot details
SHA-256
2d307c280722ff4391a30e95d03cb32904f09f4df730cc1ff3e785f67b0c3b8bSnapshot: 2026-10-13T21:48:28Z
Upstream data ↗No sources match. Clear the search or choose another role.
Input counts are before normalization, overlap and suffix pruning. TIF Mini annotates existing Light rules; its full feed is not installed in this candidate. One invalid annotation entry was quarantined.
Small enough to inspect. Measured in bytes.
- Compiled payload
- 1,970,022 B
- Signed full package
- 1,970,566 B
- RAM index
- 41,140 B
- One database slot
- 2,097,152 B
These are host-verified file and index sizes. They do not measure the device’s free runtime memory.
From sources to the cube
Normalize
Validate complete required feeds, normalize names and reject malformed input.
Merge
Remove duplicate coverage while retaining mandatory and optional roles.
Sign & verify
Build the exact payload, sign a test candidate and verify it in the C loader.
Install & read back
Write an inactive slot, verify it and switch safely. The public distribution channel is pending.
The catalogue publishes metadata and links to the original sources. It does not redistribute the full combined feed or link visitors to dangerous domains.
Kiara’s own code uses MIT. Source data has separate terms. Attribution does not imply endorsement by CERT Polska or HaGeZi.
Freshness is part of protection.
CERT recommends frequent refreshes and removal of delisted domains. Kiara’s production refresh service still needs commissioning. This page keeps the date of the measured snapshot; a stale snapshot is never relabelled as live.
Source & documentationWhat we are not counting yet
We do not collect device traffic by default. Public totals for active devices, users, downloads or blocked requests are not available. Pilot results will be published as dated measurements with their method.
- Active devices
- Not measured
- Blocked requests
- Not measured
- Verified installations
- Not measured