ZT-HAC: Zero-Trust Host Access Controller

A lightweight, offline-first desktop security utility for Linux and Windows. Built with Rust and Tauri, it uses the native OS webview to keep binary size and RAM usage low.

Features

• App Restrictor: block selected applications until you unlock them from the dashboard.
• Folder Vault: encrypt and decrypt folders with AES-256-GCM and an Argon2id password-derived key. Sealed files use the .ztv extension.
• Environment Guard: watch sensitive files such as .env or id_rsa and seal them automatically when your editors close.
• Port Stopper: block TCP/UDP ports using iptables on Linux or Windows Firewall on Windows.

Tech Stack

• Frontend: React, TypeScript, TailwindCSS
• Backend: Rust, Tauri v2
• Crates: aes-gcm, argon2, sysinfo, notify, winapi

Getting Started

Requirements: Rust, Node.js 18+, and the Tauri v2 prerequisites.

On Arch-based distros:

sudo pacman -S webkit2gtk-4.1 base-devel libappindicator-gtk3 librsvg

Run in development:

npm install
npm run tauri dev

Build a release (AppImage on Linux, NSIS installer on Windows):

npm run tauri build

Replace the placeholder icons with your own logo:

npx tauri icon path/to/logo.png

Notes

• Your vault password is never stored. If you forget it, encrypted data cannot be recovered.
• The Port Stopper needs elevated privileges: a polkit agent on Linux, or Administrator rights on Windows.
• Build the Windows .exe on Windows or in CI.