On September 21, Zhipu announced that its AI coding tool ZCode will be open-sourced soon, as a first step in addressing external data privacy concerns. Zhipu has invited CAICT and NSFOCUS to conduct security audits, confirming that the zcode-prod Alibaba Cloud OSS bucket contains zero cloud data and that all data objects and the bucket have been deleted. The ZCode v3.14.0 client has completed remediation, removing the Repo Wiki feature and cutting off local repository snapshot upload links. Zhipu also said it will establish a routine security vulnerability reporting mechanism.
Zhipu's coding product ZCode apologized to affected users on September 18 over codebase data upload concerns, saying the issue originated from the codebase indexing feature and has been fixed. The company will open source ZCode, invite third-party review, and provide an extra weekly quota reset.