Security distros live and die on trust. Not marketing trust — the quiet kind you need at 2 a.m., mid-engagement, when the tool you rely on to keep your traffic anonymous decides to misbehave. Parrot OS 7.4, released this week, is not a flashy release. It is a plumbing release. And for anyone who does real security work on Debian-based distros, the plumbing is exactly what matters.

AnonSurf grows up

The headline is AnonSurf 6.0, Parrot's tool for forcing all system traffic through Tor. Previous generations were effective but fragile — a collection of scripts that rewrote iptables rules and hoped for the best. Version 6.0 moves lifecycle management to systemd: starting, stopping, restarting, boot-time behavior, and even requesting a new Tor identity are now handled through proper units.

Why should you care? Because anonymity tools fail silently, and silent failure is the worst kind. With systemd semantics, AnonSurf's DNS changes, firewall rules, IPv6 handling, and Tor configuration get structured logging, automatic recovery of interrupted sessions at boot, and deterministic start/stop ordering. When your opsec depends on "every packet leaves through Tor," the difference between a shell script and a supervised service is not academic — it is the difference between noticing a leak in the logs and never noticing at all.

The command line also grew up. AnonSurf's CLI now reports your public IP and Tor status, includes DNS inspection tools, emits JSON output for scripting, and integrates with Nyx, the Tor monitor. JSON output is the quiet superpower here: it means you can wrap AnonSurf in your own pre-engagement checks — "assert my exit IP is a Tor exit node before running anything" — instead of eyeballing terminal output.

First impressions, curated

New users meet Parrot Discovery, a first-run setup application that goes beyond the typical welcome screen. It guides you through installing browsers, editors, chat apps, container tools, gaming software, and privacy utilities via curated APT and Flatpak commands.

There is a reasonable debate here: security distros should arguably stay opinionated and minimal. But Parrot ships a Home edition aimed at daily-driver use alongside the Security edition, and for that audience, a guided setup beats a wiki page. The curated part matters — it keeps newcomers from installing random PPAs on a machine whose entire job is trustworthiness.

Builds for the silicon you actually have

Parrot 7.4 introduces optimized ISO images targeting the amd64v3 and arm64v8.2 architecture levels, alongside standard images for older hardware. In practice this means the distro compiles key packages against newer CPU instruction sets — AVX2 and friends — so compute-heavy workloads like compression, cryptography, FFmpeg encoding, NumPy, and OpenBLAS run noticeably faster.

The catch is hardware age: x86-64-v3 roughly requires CPUs from 2013 onward (Intel Haswell and newer). If your lab machine predates that, stick with the standard image. But on modern laptops and desktops, this is free performance with no configuration tax — exactly the kind of sensible default a security distro should ship.

The supporting cast

Rocket 2.0, Parrot's tool for managing containerized security applications, gets a redesigned PySide6 interface with a searchable tool catalog, container status views, image availability, and Dockerfile management. Containerizing security tools has always been the pragmatic answer to dependency hell in pentest distros; making it pleasant to manage is overdue.

ARM support gets real attention too: new arm64 ISOs, fixes for Raspberry Pi images (package dependencies, SSH host keys, menu handling), and a first Orange Pi beta targeting the Orange Pi 5 Ultra. ARM boards are the natural home for cheap, disposable field devices — a Pi running Parrot as a drop box or a portable assessment station — so first-class images here are genuinely useful.

Parrot vs. Kali, the operator's view

The inevitable question: why Parrot over Kali? Kali has Offensive Security's backing and the larger tool ecosystem. Parrot's pitch has always been a lighter Debian base, a Home edition you can daily-drive without rebuilding your workflow, and tools like AnonSurf and Rocket that Kali users have to bolt on themselves (the community kali-anonsurf port exists precisely because the demand is real).

If your workflow centers on anonymized traffic and containerized tooling, Parrot 7.4's direction — systemd-supervised anonymity, container management as a first-class citizen — is aimed squarely at you. If you need the broadest tool coverage and official training material, Kali still wins. Neither choice is wrong; it is a question of which friction you want to pay.

The practical bit

Existing users can upgrade in place with sudo parrot-upgrade; the team recommends a fresh install only when jumping from much older versions. New users should grab the Security edition ISO (or the amd64v3 build if the hardware qualifies) and give AnonSurf 6.0's new status tooling a test run before trusting it on anything real.

Parrot OS 7.4 ships with Linux kernel 7.1 and refreshed security tools across the board. It is not the release that converts anyone — it is the release that makes the converted stay.

Sources