A launcher that opens things, and nothing else.

Web apps open in Safari or Chrome. Just Zen renders no pages, stores no cookies, and holds no logins for the sites you use. Your browser's profiles, extensions and passwords stay where they are.

Documents come from macOS Spotlight as you type. Nothing is copied, catalogued or kept. On Windows it looks in your usual folders instead.

Reading which tabs are open needs macOS Automation, asked the first time you use it. Say no and Just Zen simply opens a new tab instead, and stops asking.

Applications are launched with open, files with their own app, web apps with a URL. Just Zen has no access to the contents of any of them.

No account, no sync, no telemetry, no crash reporting. Your panel, your groups and your settings live in your user folder, encrypted with the Keychain where macOS allows it.

The panel and the finder are the only HTML in the app. Each runs sandboxed, with no Node access, and is fenced to its own files by a content security policy and a request filter.

The Mac build is signed with a Developer ID, hardened-runtime enabled, and notarised by Apple before release. Updates are downloaded over HTTPS and their signature is checked before anything is swapped.

The Windows installer carries no certificate, so SmartScreen will warn the first time you run it. Until that changes, treat the Windows build as the lesser of the two.

Dropping the browser dropped nearly all of them: the app ships Electron, the updater, and its own code. Every release runs an audit that fails the build on any advisory with a fix.

All of it is on GitHub, including the tests that run on every release: the finder, the panel, its order, and a check that a foreign page cannot reach the app's own channels.