OpenLock vs Safe Exam Browser

OpenLock is a free, open-source lockdown exam browser built natively for Linux. It aims to provide Safe Exam Browser-style controls, but the project states that it is not exam-ready because SEB key derivation is not byte-exact and the LMS handshake currently fails. It parses .seb files and sends Browser Exam Key and Config Key headers, although those keys do not yet match an LMS handshake. Kiosk mode uses fullscreen takeover through X11 or Wayland/Cage. A process guard monitors and terminates prohibited software such as screen recorders, virtual machines, and remote desktop tools. Input controls block shortcuts including Alt+Tab, Alt+F4, Ctrl+C, and PrintScreen, while browser hardening disables developer tools, downloads, right-click, console access, and drag-and-drop. Security measures include URL filtering, cgroups v2 isolation, VM/debugger/hypervisor detection, optional self-hash checks, and an off-the-record profile. Moodle, Canvas, and Blackboard adapters are listed but not validated live.

Safe Exam Browser (SEB) is a browser environment for e-assessments that restricts a device to exam use. It runs locally and connects over the internet or a LAN to a learning management system or web-based exam system. Listed compatible systems include Moodle, ILIAS, OpenOlat, Open edX, Canvas, and Inspera Assessment. SEB supports encrypted exam configurations, URL filtering, restricted browser windows, and detection of virtual machines or jailbroken devices.

Controls vary by platform. On Windows, process monitoring can hide or terminate disallowed programs, while administrators can permit selected third-party applications. On iOS, Assessment Mode blocks app switching, unauthorized websites, notifications, calls, and screenshots; activation requires a SEB Quit Password. SEB has no central server or cloud service, though an optional open-source server can be self-hosted. Optional audio or video proctoring is disabled by default and requires candidate consent when configured. SEB is freeware for Windows, macOS, and iOS. The security module for application integrity verification is distributed only as a binary, not as open source.