Many facets. One Mac.
Native macOS virtualization for Apple Silicon. Run Linux and Windows ARM VMs with snapshots, shared folders, clipboard sync, and an auto-deployed pentest lab — all built on Apple's own Virtualization.framework.
macOS 15 Sequoia or later · Apple Silicon only
Built natively on Apple's Virtualization.framework — no QEMU, no kernel extensions.
Ubuntu, Kali, Fedora, Debian, Windows 11 on ARM. Runs at near-native speed on Apple Silicon — no emulation.
Branching disk + RAM snapshots via APFS clones. Save the state before a risky experiment, revert in one click.
virtio-fs mounts your Mac folders into the VM. Security-scoped bookmarks persist across restarts — sandbox-clean.
Copy on the Mac, paste in the guest — and the other way around. Works over vsock; no kernel extensions.
One-command deploy of OWASP Juice Shop + WebGoat inside a Kali VM. Pentest targets ready to fuzz.
Fill in hostname, user, SSH keys — Facet generates cloud-init or kickstart, direct-boots the installer kernel, zero-touch install.
APFS-cloned disk state plus VZ-restored RAM. Create a snapshot before a risky upgrade, fork a branch for "what if I change this config", roll back in under a second. The whole tree is a JSON document you can inspect and diff.
For Ubuntu Server and Fedora, Facet builds the answer file (cloud-init YAML or kickstart), packs it as a cidata / OEMDRV ISO, extracts the installer kernel and direct-boots with autoinstall ds=nocloud. No GRUB menu, no Subiquity prompt, nothing to click.
Every VM gets a read-only virtio-fs share with the Facet guest agent pre-built for aarch64-linux. One install command inside the VM wires up clipboard sync, shared folders, and a systemd service that auto-starts on boot. Written in Rust, talks the FCTX wire protocol over vsock.
Pick "Kali + Security Lab" in the wizard. After install, one command deploys OWASP Juice Shop on :3000, WebGoat on :8080, WebWolf on :9090 — all pulled as native ARM64 Docker images, no emulation. Ready for burp, zap, or your own scripts.