OpenAI 2026 hackathon

Torhole

A self-hosted DNS privacy gateway that blocks unwanted domains, encrypts resolver traffic, routes it through Tor, and proves the protected path live.

Solo project by Hugo Pimentao · 0 likes · 0 comments

Archive position — measured, not model output

0 likes on Devpost

2,264 of the 7,856 archived projects have more likes, and 5,592 share exactly 0 — so this project's #7,335 place in the like-ranked listing is a tie-break inside that group, not a ranking.

Projects (log scale)

1
10
100
1k
10k
05,592
11,758
2285
3–4132
5–975
10+14

Likes on Devpost. ▲ marks this project's group.

Show the figures
LikesProjectsShare of archive
05,59271.2%
11,75822.4%
22853.6%
3–41321.7%
5–9751.0%
10+140.2%
Devpost like counts for all 7,856 archived projects, captured when this archive was built.

Executive Summary

What the company appears to be

Torhole is a self-hosted DNS privacy gateway designed to protect DNS queries by routing them through Tor, encrypting resolver traffic, and proving the protected path live. It is built as a Docker Compose platform with Pi-hole, dnscrypt-proxy, and Tor forming the core privacy path.

What changed

The project was developed during a hackathon (OpenAI 2026) and is presented as an open-source tool for individuals or small networks to enforce DNS privacy using Tor. It includes two capability profiles: Home and Advanced, with distinct deployment modes and UI features.

Single most important open question

Is there evidence of real-world usage or adoption beyond the hackathon context? The description does not indicate any revenue, customers, or traction beyond the author's own development work.

Back to contents

What The Product Actually Is

The description states that Torhole is a self-hosted DNS privacy gateway. It uses:

  • Pi-hole for local DNS blocking
  • dnscrypt-proxy to encrypt resolver traffic
  • Tor to route queries through the Tor network
  • A Docker Compose platform for deployment

It ships with two capability profiles:

  • Home: Provides a guided installer, lightweight dashboard, live verification, and safe everyday controls.
  • Advanced: Adds VLAN operation, telemetry, SSO, backups, metrics, logs, alerts, and container operations.

The system enforces privacy structurally through firewall and container rules. It does not act as a full VPN; it only protects DNS requests that actually use Torhole.

Inference The product is a self-contained, open-source tool for individuals or small networks to protect their DNS queries via Tor.

Back to contents

Positioning & Claim Evolution

The description states that Torhole takes a narrower, verifiable approach to privacy compared to tools like full-tunnel VPNs. It aims to make one precise guarantee visible and testable: DNS handled by Torhole is filtered locally, encrypted to the resolver, and sent through Tor so the resolver sees a Tor exit rather than the public IP.

It explicitly does not promise anonymity, nor does it hide normal browser traffic or control applications that bypass DNS.

Inference The positioning is focused on verifiable DNS privacy, not broad network anonymity. It positions itself as a tool for users who want to see proof of their DNS protection, not just trust a badge.

Back to contents

Target Customer & ICP

The description states that Torhole ships with two capability profiles:

  • Home profile targets households and first-time self-hosters.
  • Advanced profile targets users needing single-LAN or Trusted/IoT VLAN operation.

It also mentions support for Raspberry Pi hardware validation, router-specific setup guides, and public read-only demo environments — indicating a focus on technical users with some infrastructure knowledge.

Inference The ICP is likely tech-savvy individuals or small teams who want to self-host DNS privacy tools and understand the trade-offs involved. No evidence of enterprise or B2B customers.

Back to contents

Business Model & Pricing Evidence

The description does not state any pricing, monetization, or business model. It only describes a self-hosted tool with two capability profiles (Home and Advanced), both of which are part of a Docker Compose platform.

Inference No evidence of a commercial business model. The tool appears to be open-source or freemium in nature, but no pricing or revenue data is provided.

Back to contents

Technical & Delivery Signals

The project was built using:

  • Docker Compose
  • Pi-hole, dnscrypt-proxy, Tor
  • React/TypeScript for UI
  • Python for control and recovery services
  • Prometheus, Grafana, Loki, Alertmanager
  • Caddy, Authelia

It includes:

  • Guided web installer
  • Live verification of Tor circuit and DNS path
  • Topology-aware dashboards
  • Automated CI/CD (shell/config CI, TypeScript build/typecheck, Playwright tests)
  • Disposable staging VMs for validation

Inference The tool is built with modern infrastructure and observability practices. It emphasizes operational transparency, distinguishing between confirmed failures and inconclusive verifier outages.

Back to contents

Traction & Maturity Signals

The description states that the project was submitted to a hackathon (OpenAI 2026), and includes:

  • Fresh staging deployments validated end-to-end
  • Automated backend characterization and tests
  • Public documentation stating exactly what Torhole protects and does not protect

However, there is no evidence of revenue, customers, or real-world usage beyond the author's own development.

Inference The project is in a development or early-stage prototype phase, with no traction or adoption data available.

Back to contents

Competitive Context

The description contrasts Torhole with:

  • Pi-hole: Blocks domains but does not hide where queries originate.
  • Full-tunnel VPNs: Change the path of all traffic and transfer trust to an operator.

Torhole is positioned as a narrower, verifiable DNS privacy tool, not a general-purpose privacy solution.

Inference Torhole competes in the DNS privacy and self-hosted security tools space. It does not appear to directly compete with full VPNs or general-purpose privacy suites.

Back to contents

Key Risks & Red Flags

  • No evidence of real-world usage or adoption, only a hackathon submission.
  • Self-hosted tool: Not suitable for non-technical users, limiting scalability.
  • No commercial model or monetization strategy described.
  • Limited team size (1 person): May limit development speed and support.
  • Dependency on Tor network: Vulnerable to Tor infrastructure issues or outages.

Inference The project is not yet a product with traction, but rather an experimental tool. Risks include lack of adoption, scalability, and commercial viability.

Back to contents

Diligence Questions To Ask The Founders

  1. What is the actual user base or adoption rate beyond the hackathon?
  2. Are there any plans to monetize or commercialize this tool?
  3. How does Torhole handle edge cases like transient TLS failures or Tor circuit instability?
  4. What are the long-term maintenance and support plans for a self-hosted tool?
  5. Has the tool been tested in real-world environments beyond staging VMs?

Back to contents

Investment/Partnership Verdict

The description states that this is a hackathon submission with no evidence of revenue, customers, or traction.

Inference At this stage, Torhole is an experimental prototype, not a product ready for investment or partnership. It lacks commercial viability, adoption, and a clear path to monetization.

There is no evidence of a business model, customers, or traction beyond the author’s own development work. The tool is self-hosted, technical, and in early-stage development.

Verdict Not ready for investment or partnership. A potential future product if traction emerges, but currently lacks commercial due-diligence signals.

Back to contents

Source

Submitted to the OpenAI 2026 hackathon on Devpost. Project home on DevPost.

The analysis above was generated by a language model from the project's own one-line description. It is not independent research and contains no verified traction, revenue or customer data.