Leyzen Vault is a self-hosted file vault combining true client-side E2EE (WebCrypto AES-GCM) with Moving-Target Defense container rotation. Files are encrypted before upload, stored as ciphertext, and decrypted only on the client. Rotation reduces persistence and shrinks the attack window. Includes modern UI, previews, CLI, and enterprise-oriented features (SSO, audit logging).