Facet Beta
Windows and Linux VMs on Apple Silicon, natively.
- macOS 15 Sequoia or later · Apple Silicon only
- No account, no tracking
- Works offline
- Made in Switzerland
Overview
Native macOS virtualization for Apple Silicon. Run Linux and Windows ARM VMs with snapshots, shared folders, clipboard sync, and an auto-deployed pentest lab — all built on Apple's own Virtualization.framework.
In detail
Branch. Experiment. Revert.
APFS-cloned disk state plus VZ-restored RAM. Create a snapshot before a risky upgrade, fork a branch for "what if I change this config", roll back in under a second. The whole tree is a JSON document you can inspect and diff.
Type the hostname. Come back later.
For Ubuntu Server and Fedora, Facet builds the answer file (cloud-init YAML or kickstart), packs it as a cidata / OEMDRV ISO, extracts the installer kernel and direct-boots with autoinstall ds=nocloud . No GRUB menu, no Subiquity prompt, nothing to click.
Clipboard, folders, file drop.
Every VM gets a read-only virtio-fs share with the Facet guest agent pre-built for aarch64-linux. One install command inside the VM wires up clipboard sync, shared folders, and a systemd service that auto-starts on boot. Written in Rust, talks the FCTX wire protocol over vsock.
Pentest targets, pre-wired.
Pick "Kali + Security Lab" in the wizard. After install, one command deploys OWASP Juice Shop on :3000, WebGoat on :8080, WebWolf on :9090 — all pulled as native ARM64 Docker images, no emulation. Ready for burp, zap, or your own scripts.
Everything in Facet.
ARM64 First
Ubuntu, Kali, Fedora, Debian, Windows 11 on ARM. Runs at near-native speed on Apple Silicon — no emulation.
Snapshot Tree
Branching disk + RAM snapshots via APFS clones. Save the state before a risky experiment, revert in one click.
Shared Folders
virtio-fs mounts your Mac folders into the VM. Security-scoped bookmarks persist across restarts — sandbox-clean.
Clipboard Sync
Copy on the Mac, paste in the guest — and the other way around. Works over vsock; no kernel extensions.
Security Lab
One-command deploy of OWASP Juice Shop + WebGoat inside a Kali VM. Pentest targets ready to fuzz.
Unattended Install
Fill in hostname, user, SSH keys — Facet generates cloud-init or kickstart, direct-boots the installer kernel, zero-touch install.
