
Zero-Breach Toolkit
What is Zero-Breach Toolkit?
Zero-Breach Toolkit is a free, open-source utility that performs offline checks for traces of known mercenary spyware such as Pegasus, Predator, Graphite, and Candiru. It runs locally on Windows, macOS, and Linux computers, as well as on Android phones and iPhone backups. The tool operates in read-only mode, meaning it never modifies source evidence or system settings. It only creates temporary database snapshots and generates reports based on user requests.
During a scan, the application blocks all Python network calls and refuses redirected paths to ensure complete offline operation. It does not connect to external servers, look up spyware addresses, or include any upload functionality. Every report clearly states what was found, the strength of the evidence, and any limitations of the check. A clean result is explicitly noted as not being proof of safety.
The project provides step-by-step setup instructions requiring only Python and takes roughly twenty minutes to run. It is designed for journalists, activists, human rights defenders, and civil society organizations who need a transparent way to verify their devices without relying on cloud services.
Zero-Breach Toolkit features
- Offline scanning with no network requests or uploads
- Read-only analysis that preserves original evidence
- Supports Windows, macOS, Linux, Android, and iPhone backups
- Updates local indicator lists for known spyware families
- Generates detailed reports showing evidence strength and limits
- Blocks Python network calls to prevent data leakage
Who uses Zero-Breach Toolkit and for what
- Journalists checking work laptops for targeted surveillance tools
- Activists verifying Android phones after suspected compromise
- Civil society members scanning iPhone backups for hidden traces
- Security researchers performing forensic-style device audits
- Individuals running periodic offline checks on personal computers
Zero-Breach Toolkit FAQ
Is Zero-Breach Toolkit free?
Yes, the tool is completely free and released under an Apache-2.0 license.
Is Zero-Breach Toolkit open source?
Yes, the source code is publicly available on GitHub under an Apache-2.0 license.
What is Zero-Breach Toolkit used for?
It is used to perform offline checks for traces of known mercenary spyware like Pegasus, Predator, Graphite, and Candiru on computers and mobile devices.
Does Zero-Breach Toolkit work on Mac?
Yes, it supports macOS, along with Windows, Linux, Android phones, and iPhone backups.
Does Zero-Breach Toolkit require an internet connection?
No, the tool runs entirely offline. It blocks network calls, does not look up addresses, and has no upload feature.
Can Zero-Breach Toolkit modify my files?
No, it operates in read-only mode. It only writes temporary database snapshots and the reports you request.
Comments (0)
Comments and upvotes open when this product launches on ProductPerch.
More Security launches
Find out who's calling: worldwide spam call database
HOL GuardOpen source · verified
Approve or block AI coding agent actions on your machine
Fraud, AML & cybersecurity compliance for Saudi Arabia