Open-source security automation

Reduce exposure.
Keep control.

ZSEC pairs disciplined Linux security updates with a deterministic endpoint-scanner preview. Public evidence comes in. Shell commands do not.

Install server protectionGet Shield v0.1.2Read the docs
Apache-2.0 sourceData-only feedNo AI runtime

Live safety posture

ZSECBOUNDARY ACTIVE
Remote commandsDisabled
Feed authorityRead-only
Update scopeSecurity only
AI dependencyNone

Two products · one security discipline

Server maintenance and endpoint evidence, without a black box.

ZSEC keeps each lane explicit so a public feed, web page or AI system never becomes an operating-system control plane.

01 / LINUX SERVERS

ZSEC Auto Updates

Predictable security maintenance through the package manager already trusted by the operating system.

  • APT and DNF security packages only
  • SSH backup and lockout guardrails
  • Fail2ban direction and conservative sysctl checks
  • Public AI/dev-port exposure warnings
  • Read-only advisory TODOs for operator review
InstallInspect source
02 / WINDOWS · MACOS · LINUX

ZSEC Shield Preview

A deterministic, no-AI, on-demand scanner with local evidence and explicitly recoverable actions.

  • Local SHA-256 and exact-byte rules
  • Ed25519-signed data-only rule feeds
  • Structured JSON reports and read-only inventory
  • User-selected scans; no silent background scan
  • Opt-in quarantine with recovery workflow
Review releaseInspect source

Immutable prerelease · published 2 August 2026

ZSEC Shield v0.1.2

The exact release assets and tag are immutable and covered by GitHub release attestation. The archives remain unsigned: verify the authenticated checksums, test in a safe environment and keep built-in protection enabled.

PREVIEW / UNSIGNED
Windows 10 / 11x64 ZIP ↓Apple siliconmacOS arm64 ↓Linuxx86_64 tar.gz ↓AuthenticitySHA-256 sums ↓
Evidence boundaryZSEC Shield is an on-demand security companion—not certified antivirus, real-time prevention, guaranteed detection or a replacement for the operating system's built-in security.
ROOT / REVIEW-FIRST INSTALL
curl -fsSL https://raw.githubusercontent.com/ResearchForumOnline/ZSEC/main/install.sh -o zsec-install.sh
less zsec-install.sh
sudo bash zsec-install.sh
sudo zsec status
sudo zsec check

Five-minute start

Review. Install. Verify.

Read the installer before granting root privileges. Test on a spare server or VM, preserve backups and confirm the status output after installation.

01Download locally
02Review the script
03Verify status
Operations guideSecurity brief

Public evidence stream

Live Security Feed

Loading signed-off data…
LOADING

Retrieving the public advisory feed

Feed data creates local review notes. It cannot execute commands.

Hard security boundary

Small blast radius by design.

Every public surface is advisory. Package selection and privileged changes remain local and inspectable.

Allowed

Local, deterministic operations

  • Read and cache public advisory JSON
  • Create local text and JSON TODOs
  • Use normal OS package security metadata
  • Warn about locally observed exposure
  • Preserve human review and rollback

Never from the feed

Remote control behaviour

  • Execute shell commands
  • Install feed-requested packages
  • Change firewall or SSH configuration
  • Upload samples or private host data
  • Let an AI system perform runtime actions

Operations before hype

Read the complete ZSEC documentation.

Installation, daily operation, threat model, advisory-feed contract, FreeWebPanel integration, release verification and recovery boundaries are documented in one place.

Open ZSEC docsReport a vulnerabilityReport AI output