Zero Breach Toolkit is a free, open-source security scanner that checks devices for traces of known mercenary spyware, including Pegasus, Predator, Graphite, and Candiru. It supports Windows, macOS, Linux, Android phones, and iPhone backups. The software compares local forensic artifacts against published indicators of compromise. It examines supported browser records, system logs, files, and other potential evidence sources. Scans run offline without uploading personal information or modifying original evidence. Reports classify findings by evidentiary strength and identify checks that could not be completed. Users can update indicator databases separately before scanning. The toolkit assists security investigations but cannot conclusively prove that a device is free of spyware.
Features
- Cross-Platform Spyware Indicator Scanning
- Pegasus, Predator, Graphite, and Candiru Detection Checks
- Offline and Read-Only Forensic Analysis
- Browser, System Log, and File Artifact Inspection
- Evidence-Graded Findings and Coverage Reports
- Updatable Indicators of Compromise