Download the client

One static binary per platform. No installer, no runtime, no dependencies — copy it to the test machine and run it.

version 0.2.0 built 15 Aug 2026 08:32 UTC

This binary is designed to be flagged

Your own AV may quarantine it on download, and so may your browser. That is expected — it contains inert malware test signatures on purpose. Run it only on a disposable test machine and read the safety notes first.

Before the first real run, --explain prints every command, contact and change the suite would make without running any of it, and --list-targets prints every outbound destination it can ever reach. Both are safe on any machine, and they are what a security team needs in order to approve a run.

Linux

Windows

macOS

Verify what you downloaded

Checksums for every published binary: sha256sums.txt

Linux / macOS
sha256sum -c sha256sums.txt --ignore-missing
Windows PowerShell
Get-FileHash .\securitycheck-windows-amd64.exe -Algorithm SHA256

Next