ZeroTrust - AI-Powered Website Security Scanner

November 29, 2025 · View on GitHub

A Chrome extension that provides local-first, privacy-preserving website security analysis using on-device AI (WebLLM). All processing happens in your browser - no data is sent to external servers.

Features

Trust Score Analysis - Comprehensive 0-100 security scoring with letter grades (A-F)
Security Breakdown - Detailed analysis of:
- HTTPS/SSL certificate validation
- Domain age verification
- Phishing signal detection
- Malicious script scanning
- Cookie compliance checking
- Form security assessment
AI Chatbot - Ask questions about any website's security and content
Real-time Scanning - Instant security assessment of any webpage
100% Local - All AI processing runs in your browser using WebGPU

AI Models

Choose from three models based on your device capabilities:

Model	Size	VRAM	Best For
Gemma 2 2B	~1.5GB	2GB	Quick scans
Phi-3 Mini ⭐	~2GB	3GB	Recommended
Llama 3.1 8B	~4.5GB	6GB	Complex analysis

Installation

From Source

Clone the repository:

git clone https://github.com/yourusername/zerotrust.git
cd zerotrust

Install dependencies:
```
npm install
```
Build the extension:
```
npm run build
```
Load in Chrome:
- Open chrome://extensions/
- Enable "Developer mode"
- Click "Load unpacked"
- Select the dist folder

Development

# Development mode with hot reload
npm run dev

# Build for production
npm run build

# Lint code
npm run lint

Architecture

This is a Manifest V3 Chrome extension with multiple components:

┌─────────────┐     ┌─────────────┐     ┌─────────────┐
│   Popup     │────▶│  Background │────▶│  Offscreen  │
│   (React)   │     │  (Router)   │     │  (WebLLM)   │
└─────────────┘     └─────────────┘     └─────────────┘
                           │
                           ▼
                    ┌─────────────┐
                    │   Content   │
                    │  (Scanner)  │
                    └─────────────┘