ZAI Open-Sources ZCode Ecosystem Following Security Remediation
ZAI has open-sourced the complete codebase for ZCode—including its desktop app, web workspace, backend, Agent CLI, and runtime—on GitHub. This release comes alongside client version v3.14.0, which remediates data privacy and security flaws previously identified by the developer community. Open-sourcing the full software stack allows developers to audit code for telemetry and security risks, establishing greater transparency for AI-assisted development tools. It demonstrates a responsive security remediation workflow, fostering safer adoption of desktop AI agents that access local repositories. Independent security audits by CAICT and NSFOCUS confirmed that ZCode v3.14.0 completely removed the Repo Wiki feature and disabled local repository snapshot uploads. Additionally, ZAI confirmed the complete deletion of the `zcode-prod` cloud storage bucket and stated that user code was never retained or used for AI model training.
## BACKGROUND
ZCode is a desktop workspace and AI coding agent created by Z.ai that integrates with LLMs (such as GLM models) to assist developers in planning, writing, and reviewing code. Prior to this release, developers raised privacy concerns regarding ZCode's background processes uploading repository snapshots to external cloud servers without clear disclosure.