Now available for Mountain OS

The browser that trusts nothing, protects everything.

ZeroTrust Browser is a security-hardened Firefox build designed for Mountain OS. Maximum privacy, zero telemetry, and a full suite of cybersecurity tools — configured from day one so you don't have to.

Open Start Page View on GitHub Get the Extension
0
Telemetry sent
6+
Extensions pre-installed
600K+
Threat feeds
100%
Open source base

Why ZeroTrust Browser

Your browser knows too much.

Most browsers ship with telemetry enabled, sponsored content, and privacy settings buried behind multiple menus. ZeroTrust Browser flips that default — everything is locked down from the first launch.

🔒
HTTPS-Only Mode
Every connection is forced to HTTPS. HTTP sites are blocked entirely — no exceptions, no prompts.
🌐
DNS over HTTPS
All DNS queries route through Cloudflare's encrypted resolver. Your ISP can't see what sites you visit.
🛡️
Real-Time Threat Protection
The ZeroTrust Extension scans every page for phishing, malware, and tracker scripts before they load.
👁️
Anti-Fingerprinting
Canvas, WebGL, battery, sensor, and WebRTC APIs are restricted so ad networks can't build a profile from your hardware.
🚫
Zero Telemetry
Every telemetry, crash reporting, and data collection preference is disabled. Firefox knows nothing about how you browse.
🧹
Auto-Clear on Shutdown
Cache, sessions, and offline storage are wiped every time the browser closes. Fresh start, every time.
🍪
Cookie Isolation
Third-party cookies are partitioned per site. Cross-site tracking is blocked at the network level.
🔍
DuckDuckGo Default
Searches go to DuckDuckGo — no search history tied to your Google account, no personalized ad profiling.
🏔️
Mountain OS Native
Built specifically for Mountain OS with a custom dark theme, native desktop integration, and one-command install.

Security Hardening

200+ settings configured for you.

ZeroTrust Browser ships with a hand-tuned user.js that locks down Firefox's most sensitive preferences — based on the arkenfox hardening guide and Mozilla's security documentation.

TLS 1.2 minimum enforced
Older, vulnerable TLS versions are disabled. Only modern cipher suites are accepted.
WebRTC disabled
Prevents local IP address leaks that can expose your real location even behind a VPN.
Strict cert pinning
Certificate pinning is enforced at level 2 — man-in-the-middle attacks using rogue certs are blocked.
Referer trimming
Cross-origin referer headers are stripped to origin-only so sites can't track where you came from.
Speculative loading disabled
DNS prefetch, link preloading, and speculative connections are all turned off — no background requests.
OCSP hard-fail + CRLite
Certificate revocation is strictly enforced. Revoked certificates are rejected, not silently accepted.
Geolocation blocked
Location API, GPS, and sensor access are disabled by default. Sites cannot determine your physical location.
Pocket & sponsored content removed
All Mozilla sponsored content, Pocket integration, and recommendations are stripped from the UI.

Pre-installed Extensions

Protected from the first tab.

Six battle-tested extensions are force-installed via enterprise policy on first launch — no manual setup, no AMO browsing required.

🛡️
ZeroTrust Dashboard Extension
Real-time site scanning, phishing detection, and threat scoring powered by the ZeroTrust engine.
Pinned
🧱
uBlock Origin
The gold standard ad and tracker blocker. Blocks ads, malware domains, and tracking scripts network-wide.
Pinned
🔑
Bitwarden
Open-source, zero-knowledge password manager. Your vault is encrypted before it ever leaves your device.
📦
Multi-Account Containers
Isolates cookies per site so Google, Facebook, and Amazon can't track you across the web.
🔗
ClearURLs
Silently strips UTM, fbclid, gclid, and 250+ other tracking parameters from every URL you visit or share.
📡
LocalCDN
Serves common libraries locally — stops CDN providers from logging your IP on every page load.

"According to the FBI's Internet Crime Report, cybercriminals stole over $3.5 billion USD from individuals in 2019 alone — and less than 9% was ever recovered. The browser is the most attacked surface on your device. ZeroTrust Browser was built to make it the hardest one to breach."

MRichard333 — Cyber Defense Hub

Get Started

Zero trust. Total control.

ZeroTrust Browser is free, open-source at its core, and built for people who take their security seriously. One install script. Everything configured. Nothing to compromise.

Open Start Page View on GitHub Explore the Dashboard