Features
Protection built into the OS, one feature at a time.
People everywhere are fixing code to stop attacks, and that work matters. ZENOS adds a layer at the level of the operating system, so that a weakness in one program does not become a leak. Each feature says how it works, what is proved, and what is not yet.
Sealed files with levels
Every file carries its level, L1 to L5, and is encrypted the moment it is saved. Plaintext exists only in memory while it is open.
Read more →Working todayApproval to open
Above your level, officers approve on their own phones. More levels need more of them, and nobody approves their own request.
Read more →Working todayStop on leak signs
A file to USB, a burst of opens, an unapproved upload: the PC contains it in milliseconds, before anyone reads an alert.
Read more →Working todayWatch on incoming access
New connections from outside are refused by default. Every refusal and failed sign-in is counted and shown, and a removed firewall is put back.
Read more →Proved in Lean 4Where content may go
One rule decides every copy: folders, clipboard, printer and each kind of AI. Content never moves to a lower level. L5 never prints.
Read more →Working todayTamper-evident ledger
Every action joins a hash chain copied to audit nodes run by different organizations. A rewritten past is caught.
Read more →Proved in Lean 4Proven decisions
The rules that open files, release keys and lift a stop are proved in Lean 4, and the running program is built from the same definitions.
Read more →Working todayMessages and video calls
Messages use the Signal protocol. Video calls run on a server you host and are encrypted end to end, with a new key whenever someone joins or leaves.
Read more →TestingSign in with your phone
Saved passwords open only with a key your phone makes. A stolen PC or a copied disk yields no passwords.
Read more →Working todayUse AI without leaking
Connect your organization's own AI, and Documents, Sheets and Slides use it on every PC. Higher-level files go only to that AI, never outside. No vendor lock-in.
Read more →TestingDistributed storage
Sealed files are split into encrypted shards across certified nodes, so no single machine holds a whole file.
Read more →Next releaseStudio
A music and picture library, trimming and picture-on-audio video, for the Personal and Family editions.
Read more →