Zen

A browser extension only ever sees the browser. Zen works one level down, setting up a proxy that intercepts HTTP requests from every application on the machine and blocks the ones serving ads, tracking scripts, malware and other unwanted content.

Operating at the system level catches what an extension cannot, trackers embedded in desktop applications and in operating system components themselves. To inspect HTTPS traffic, Zen asks on first run to install a root certificate, generated locally and never leaving the device.

Filtering is configurable rather than fixed.

• Preinstalled filters: a set of blocklists ships ready to use with no setup.
• Custom lists: hosts files and EasyList-style filters are added by URL.
• Request history: every blocked request can be inspected to see which filter and which rule stopped it.
• Filter list manager: lists are added, reviewed and managed from the interface.

Builds cover x64 and ARM64 on all three platforms, with Winget on Windows, a Homebrew cask on macOS, and an install script plus an AUR package on Linux. One caveat for Linux users, automatic proxy configuration currently works only on GNOME and KDE-based desktop environments. Windows builds are signed with a certificate donated by the SignPath Foundation, and the project welcomes translations as much as code.