Windows · macOS · Linux · version 0.3.0
ZSEC Antivirus 0.3 can watch selected folders using native operating-system file events, scan changed files locally, verify signed data-only rules and place configured matches into authenticated encrypted quarantine when you explicitly enable it.
Install boundary: these unsigned website evaluation packages are built from draft pull request #5 and detect after filesystem changes rather than at the kernel access boundary. The newer Windows graphical client is source/local-evidence only at immutable revision 394d97b; its public native download remains gated by publisher signing and release qualification. Verify exact SHA-256 values and keep Malwarebytes, Microsoft Defender or native platform controls active.
Windows graphical client
The installed Community 0.3 client exposes overview, scans, automatic monitoring, encrypted quarantine, signed feeds, reports, evidence-backed health, security/YubiKey status, replacement blockers and settings in one interface.
Inspect the immutable Windows GUI source and the hash-verifying desktop installer scripts.
Platform packages
Every archive has a separate SHA-256 file and immutable source revision 2e46d12c345e853282af97214b35b3c3badaea86. A mismatch means stop and delete the download.
Self-contained ZIP for Windows 10 or 11. Extract it before starting the executable.
Checksum · 3929c3c496f21b202d46c636008b6b08571729eb3724437e377c46d58f70e6b1
Self-contained tar archive built and smoke-tested on the declared macOS architecture.
Checksum · 9b8a5be5930daae9b1cdb603c423c1912bfbe7438b1fd79f71112f3669253cd4
Self-contained tar archive for a supported x86-64 Linux test environment.
Checksum · e25b61ec37db60faca94bb979fd5c20ce35b19364bb86a341e368dfce3ad0757
Advanced users on Windows, macOS or Linux can install the universal Python 3.11+ wheel with pipx install zsec_shield-0.3.0-py3-none-any.whl. Download wheel · Python checksums
Install safely
Use a test folder first. Each archive includes its platform companion, status command, uninstall path, manifests and licences.
Windows: Get-FileHash .\zsec-shield-*.zip -Algorithm SHA256. macOS: shasum -a 256 zsec-shield-*.tar.gz. Linux: sha256sum zsec-shield-*.tar.gz.
Keep the extracted folder together. The executable, libraries, manifest, licences and threat-model documents form one reviewed bundle.
Run the included installer in plan mode. Confirm the protected Downloads path, state path, CLI/runtime hashes and per-user supervisor before it writes anything.
Start the per-user companion, then use the included status script to verify its supervisor, executable hashes and fresh 30-second heartbeat.
Automatic post-change protection
The per-user supervisor starts at login, pins the CLI/runtime by SHA-256 and writes bounded health evidence. The native observer starts before its baseline scan.
.\Install-ZsecAntivirusCompanion.ps1 -CliPath .\zsec-shield.exe -EnableQuarantine -StartNow
sh ./install.sh --cli "$PWD/zsec-shield" then sh ./status.sh. Use the matching platform archive only.
Windows quarantine is enabled only by the explicit installer switch shown above. macOS/Linux packages start in detection-only mode; all three include a state-preserving uninstall path.
Know what this release is
ZSEC Antivirus 0.3 performs local exact-rule scanning after filesystem activity and can encrypt configured matches for recovery. It does not mediate file access, inspect process memory or behaviour, filter network traffic, register with Windows Security, run as a protected service, or provide independently certified detection efficacy.
That boundary is enforced in code: replacement-readiness returns a non-success decision with keep_existing_protection, and there is no override.
Keep existing antivirus and OS controls active.
Browser privacy layer
ZSEC Browser Shields Community 0.4 contains 38 packaged network blockers, two link-cleaning rules, local per-site controls and optional High-Risk Browsing. It is an unsigned, manually installed Manifest V3 extension—not a standalone browser or spyware detector.