Small attack surface

Security without a media backend

Hushload removes the highest-risk component of many online downloaders: a server receiving sensitive URLs and media.

Structured process execution

The Rust controller passes validated arguments directly to bundled sidecars. It never creates a shell command from a URL, title, filename, or output path.

Explicit network destinations

The application connects to the supported source selected by the user and the public GitHub release endpoint for update checks. There is no Hushload application API.

Signed application updates

Tauri update bundles use an Ed25519 signature that is separate from paid Windows publisher signing. The private updater key remains in release automation secrets; the app embeds only the public verification key.

Release evidence

Stable releases publish SHA-256 values, sidecar provenance, licenses, update signatures, release notes, and an antivirus scan permalink for the exact installer.

Report a vulnerability

Do not include adult media, source URLs, private filenames, tokens, or personal data in a report. The security contact will be published before production launch.