Your computer, at a glance.
The dashboard brings current computer metrics and shortcuts to the app’s areas together. The values are examples, not live computer data.
A Windows 11 app that brings together system metrics, maintenance tools and specialized modules. Explore what each area does, how it works and where your data stays.
Real zkkTools v14.1.5 captures; PT-BR app interface; this computer's identifiers and readings are hidden.
—downloads recorded
The dashboard brings current computer metrics and shortcuts to the app’s areas together. The values are examples, not live computer data.
The cleanup tool shows the items it found so you can review them before confirming removal.
See the dashboard and cleanup tool side by side, using real captures from version 14.1.5. The interface is in Portuguese and local data is hidden.
Explore the Free versionApp areas
zkkTools combines a system metrics dashboard with maintenance tools and specialized Windows 11 modules. Each area has a distinct role, and the catalog below shows what is available today.
See CPU, memory, drives, GPU, network and system indicators on the home dashboard, with real values when Windows makes the data available.
Explore cleanup, tweaks, uninstall and restore points. Compatible tools show a preview and ask for confirmation before applying changes.
Diagnostics, internet, security, energy, games, drivers and appearance extend the toolkit. The site clearly marks areas that require Premium.
Areas already implemented in the current app. Premium features clearly show the required access.
Create or check a restore point before important system changes.
Six metric rings, system health status and the Apps and Modules hub.
Complete analysis of hardware, Windows and settings with verifiable information.
Connection quality and diagnostics to surface relevant network data.
View diagnostics →Security Center with local heuristics and known-vulnerability checking.
View security →Battery, plans and power actions with validation before changes are applied.
TPM, Secure Boot and Windows integrity shown with verifiable status.
Read-only analysis, selection and confirmation before any removal.
Verifiable optimizations with risk level, preview, rollback and confirmation. High-risk and critical tweaks require Premium.
Remove Win32 and Store apps with confirmation and conservative handling.
Plan, devices and sync shown after the Google Account is validated.
Appearance, window, language, behavior, notifications, privacy and updates.
Real-time monitoring, process list and system overview.
Detects installed games (Steam and Epic) and applies presets — High quality, High performance, Pro or Custom — with backup and hash verification.
These features are planned and not yet part of the current version.
More analysis to clearly identify system state.
A dedicated area to guide driver maintenance.
Planning subject to safeguards, compatibility and explicit confirmation.
Planned area to work with Windows images in a guided way.
Planned preferences for mouse, controller and games.
Planned settings for compatible controller devices.
A planned way to support zkkTools development.
We build zkkTools around one simple rule: when we can't verify something is safe, we treat it as unsafe — never the other way around. Here are the real mechanisms behind that rule, with the technical details available for anyone who wants to check them.
History is synced between your App devices through the zkkTools backend and sealed with end-to-end encryption before it ever leaves the PC. The web portal has no key and neither decrypts nor displays that content.
X25519 (ECDH) key agreement, HKDF-SHA256 key derivation, and AES-256-GCM encryption. CEKs (content-encryption keys) and temporary derived secrets are scrubbed from memory right after use.
There's no password to steal: access goes through Google (OIDC + PKCE), and the old password-login endpoint has been permanently retired.
The default path is a 12-digit code: you sign in with your Google account on the website and type the code into the app — the app itself never opens a browser or embeds Google's login UI. The legacy password endpoint now returns HTTP 410 Gone.
Every downloaded update has to pass two checks before it's installed. If either one fails, or can't be confirmed, the update is rejected.
SHA-256 is checked against the official manifest. When an artifact includes Authenticode, the updater also validates its publisher and revocation status; beta builds may be unsigned, but never lack verifiable hashes and metadata.
The step that needs administrator rights runs in its own separate, minimal process, isolated from the rest of the app.
Only that helper process is elevated via UAC — never the main app. It independently re-checks the hash and version metadata and, when present, the digital signature immediately before installing.
In signed builds, internal libraries are accepted only when they belong to the expected zkkTools publisher.
Signed-build verification confirms the specific zkkTools publisher, not just "any trusted certificate."
Login attempts are rate-limited to blunt brute-force attacks, and every session is tied to the device that created it.
If a session becomes invalid for that device (after a security fix, for example), the app forces a clean re-login instead of silently continuing.
Lose the connection to our backend, and Premium features don't abruptly lock.
There's a 7-day offline tolerance window before anything degrades, and your local history and data stay accessible regardless of connectivity.
Preferences, logs and history live on your PC in plain JSON, written with crash-safe atomic writes.
Bug reports open your own email client, pre-filled and with sensitive data stripped out — instead of silently phoning anything home.
Purchases and subscription management happen on the website, through Stripe. The desktop app never handles card data.
This isn't a one-time claim: in September 2026 (v1.1.3) we shipped a security audit that removed a trust flag based on an editable local cache, extended session revocation to the license and device endpoints, and began requiring the correct publisher when verifying internal DLLs. See the full history in the Patch Notes.
Genuine testimonials from people who use the app every day.
Google-only sign-in, no passwords. Your subscription is tied to your account.
Payment happens on the website, through Stripe. The app never handles card data.
The app checks the official account state: Premium is never activated just visually.
Premium features unlock once the payment is confirmed.
Review the available options. Prices, billing period and renewal details come from Stripe and appear again before confirmation.
Recurring subscription. Manage your subscription in the account portal. See the Refund Policy.
Compare Free access with the modules that require Premium. This list reflects features available in the app.
Free is already complete for the basics. Premium unlocks the areas that need deep analysis.
Explore app features See downloads Recurring subscription via Stripe. Price and renewal are shown before you confirm.Explore the modules, review download options and try Free. Premium is optional and can be activated later.