Zerotrust

ZeroTrust - AI-Powered Website Security Scanner

A Chrome extension that provides **local-first, privacy-preserving** website security analysis using on-device AI (WebLLM). All processing happens in your browser - no data is sent to external servers.

Features

• Trust Score Analysis - Comprehensive 0-100 security scoring with letter grades (A-F)
• Security Breakdown - Detailed analysis of:
  • HTTPS/SSL certificate validation
  • Domain age verification
  • Phishing signal detection
  • Malicious script scanning
  • Cookie compliance checking
  • Form security assessment
• AI Chatbot - Ask questions about any website's security and content
• Real-time Scanning - Instant security assessment of any webpage
• 100% Local - All AI processing runs in your browser using WebGPU

AI Models

Choose from three models based on your device capabilities:

Model	Size	VRAM	Best For
Gemma 2 2B	~1.5GB	2GB	Quick scans
Phi-3 Mini ⭐	~2GB	3GB	Recommended
Llama 3.1 8B	~4.5GB	6GB	Complex analysis

Installation

From Source

1. Clone the repository:

   git clone https://github.com/yourusername/zerotrust.git
   cd zerotrust

2. Install dependencies:

   npm install

3. Build the extension:

   npm run build

4. Load in Chrome:

   • Open chrome://extensions/
   • Enable "Developer mode"
   • Click "Load unpacked"
   • Select the dist folder

Development

# Development mode with hot reload
npm run dev

# Build for production
npm run build

# Lint code
npm run lint

Architecture

This is a **Manifest V3** Chrome extension with multiple components:

┌─────────────┐     ┌─────────────┐     ┌─────────────┐
│   Popup     │────▶│  Background │────▶│  Offscreen  │
│   (React)   │     │  (Router)   │     │  (WebLLM)   │
└─────────────┘     └─────────────┘     └─────────────┘
                           │