ZChat ZChat 2.0 Self-Hosted Live Chat

Security

Ownership-first security

Keep your support stack inside the boundaries you already trust

The strongest security advantage in ZChat is not a marketing checklist. It is the fact that the software runs on your infrastructure, uses your deployment standards, and keeps customer conversations inside your chosen environment instead of routing them through a third-party chat vendor.

Data stays in your systems

You decide where transcripts, visitor records, and configuration data live and how they are retained.

Deployment standards are yours

Use your certificates, reverse proxies, network rules, monitoring, and operational controls rather than adapting to a vendor baseline.

AI without forced exposure

Keep AI disabled, connect an external provider, or use private local inference depending on your policy requirements.

Security benefits that come from self-hosting

  • Keep support records in your own database and backup process
  • Apply your own identity, access, and infrastructure standards
  • Control which environments can access the system
  • Decide whether AI is external, private, or disabled entirely
  • Align retention and review processes with internal policy
  • Avoid unnecessary third-party data exposure in normal chat operations

Built-in protections

Ownership is the foundation, but ZChat also ships hardening at the application layer:

  • Role-based access for admins and agents (JWT auth)
  • Audit log of admin actions with filters and CSV export
  • Brute-force login throttling with failed-attempt logging
  • Per-IP rate limiting on public widget endpoints
  • Hardened HTTP headers and a Content-Security-Policy
  • HMAC-SHA256 signed webhooks for tamper detection
  • Uploads validated by file signature, not just extension
  • XSS-sanitized widget rendering
  • IP block list with CIDR ranges and auto-expiry
  • GDPR cookie consent plus data export and erasure
  • HTTPS and secure WebSockets with your own certificates
  • Optional fully-local AI so prompts never leave your server

Security starts with ownership.

ZChat is built for organizations that want modern support software without handing core support traffic to a hosted middleman.

Owned customer support software

Deploy live chat on your own terms, not on someone else's pricing model.

ZChat gives you the installable server, web dashboard, website widget, and desktop agent tools in one self-hosted product you buy once and keep. Run it on infrastructure you trust and connect AI only if and how you want it.

Download ZChat See Product Demo

Deployment

Install on Windows or Linux, behind IIS or Nginx, in a VM, or in Docker if that fits your stack.

Commercial model

One-time purchase, perpetual license, and no monthly per-agent bill attached to growth.

AI Flexibility

Use Ollama locally or connect OpenAI and Anthropic with your own provider accounts.