ZTDS Perimeter Network Scanner
Empirical zero-trust verification. Monitor active browser sockets, audit pipeline code against RFC v1.0 invariants, simulate hardware airplane isolation, and generate verifiable cryptographic audit receipts.
One-Scan Domain Perimeter & ZTDS Blueprint Generator
Inspect any external web application, SaaS, or API endpoint. Identifies input collection surfaces, third-party data egress sinkholes, and generates tailored ZTDS RFC v1.0 deployment blueprints in under 1.5 seconds.
Live Network Socket Interception & Invariant 1 Egress Monitor
Active browser hooks intercept calls to window.fetch and XMLHttpRequest. Test bidirectional sanitization and verify exactly 0.00 bytes cross the perimeter.
All outbound socket calls are intentionally disabled. In-RAM engine executes with 100% autonomy.
{}
| Time | Protocol | Destination Host | Payload Classification | WAN Egress | Invariant 1 Status |
|---|---|---|---|---|---|
| 00:00:00.000 | INIT | localhost (in-memory) | Kernel RAM Listener Attached | 0.00 Bytes | ✓ ZERO EGRESS |
AI Pipeline Code Linter & Conformance Scoring
Analyze your TypeScript, Python, or LangChain pipeline code locally in browser memory against the 4 ZTDS invariants.
The 5-Step Airplane Mode Audit Protocol
Zero-Trust means you do not take our word for it. Any CISO, external auditor, or engineer can independently prove client-side isolation in 30 seconds:
Press F12 or Inspect. Switch to the Network tab and enable Preserve log.
Disconnect Wi-Fi or set DevTools network throttling to Offline. The machine is now completely isolated.
Paste sensitive medical records, patient names, SSNs, or API credentials into the local buffer.
Trigger sanitization. Surrogate tokens appear synchronously in volatile memory in < 0.25ms.
Confirm DevTools shows 0 failed socket calls and exactly 0.00 bytes transferred over WAN.
Continuous Codebase AST Auditing & Pre-Merge Invariant Gating
Verify repositories and block pull requests that leak cleartext secrets before deployment.
# Run instant in-memory AST audit on local codebase: npx ztds-audit --dir ./src --verbose # Terminal Output: [ZTDS] ZTDS.ai In-Memory Codebase Auditor (RFC v1.0 Conformance) Files Scanned: 42 files in 18ms Audit Hash: sha256:7343da5fed1858d1aabd60684097dc3e192f7... ---------------------------------------------------------------------- [PASS] CONFORMANCE CONFIRMED: 0 INVARIANT VIOLATIONS DETECTED All scanned files comply with ZTDS Invariant 1 (Zero-Egress) and Invariant 3 (RAM isolation).
Unlike SaaS static scanners that require read access to private repositories, ztds-audit operates entirely on the local developer node. Zero source files leave the local perimeter.
Returns exit 0 on pure conformance, or exit 1 on unmasked credentials, cleartext PII, or persistent disk storage writes.