Citadel Firewall

Citadel Firewall is a personal application‑level firewall with a whitelist policy. It automatically blocks all outgoing network connections from any program on your PC until you explicitly grant permission.

When you (or the OS) launch any application that tries to reach the internet or local network — Citadel intercepts the request, shows you a prompt with the file path, and waits for your decision:

• Allow — the app gets network access.
• Block — the connection is terminated at kernel level; the app receives a network access denial.

Your decision is permanent and persists across reboots. No data leaves your PC without your explicit approval.

• Full control over outbound traffic — you decide which apps can go online.
• Real‑time monitoring — instant alerts on first connection attempt.
• One‑click rule management — switch any app between allowed / blocked.
• Kernel‑level filtering — highest priority, cannot be bypassed by proxies, port forwarding, or third‑party tools.
• Works alongside other firewalls — Citadel's block rules always override conflicting allow rules.

Citadel is designed to protect user privacy and isolate software in Windows. It turns your OS network space into a closed fortress where the rule is: «Everything not explicitly allowed is blocked dead.»

• Data Exfiltration: blocks apps from secretly leaking your personal files, passwords, or browser history to external servers.
• Hidden Telemetry: stops legitimate apps and Windows components from collecting and sending usage statistics to marketers without your consent.
• Malware Activity: if your PC gets infected, Citadel blocks the virus from contacting its command‑and‑control server (C2).
• Uncontrolled Background Traffic: prevents apps from auto‑downloading gigabytes of updates or running hidden ad‑calls in the background.

Citadel is strictly a standalone, local application-level personal firewall. It is NOT an antivirus, anti-malware, or technical support service. To ensure ultimate privacy, transparency, and zero system overhead, Citadel operates under the following engineering boundaries:

• No File System Analysis: Citadel does not scan your hard drives, monitor file modifications, or perform heuristic file analysis. It completely leaves asset scanning to your OS.
• Pure Network Stack Monitoring: The software interacts solely with the native Windows Filtering Platform (WFP) to log outbound network request attempts. It works exclusively with the public execution data provided by the OS.
• No Deep Packet Inspection: Citadel does not intercept, read, or analyze the actual content or payload of your network packets. It functions strictly as a binary traffic toggle switch based on process metadata.
• Zero AI / No Machine Learning Overhead: Citadel includes zero local LLM modules, neural networks, or predictive AI algorithms. Security rules are strictly deterministic. No hallucinations, no unwanted background processing, and zero telemetry masked as "AI model training".
• Immutable Native Pre-Compiled Binary: Built exclusively in pure native C++ and C# WPF. The executable is compiled ahead-of-time (AOT) with hard static boundaries. No runtime code generation, no dynamic injection, and no remote script execution. What is compiled on release day remains untouched during execution.
• 100% Offline & Server-Independent Architecture: Citadel operates entirely within your local Windows kernel stack. It requires zero active cloud connections to block connections, evaluate rules, or manage policies.