Download the client

One static binary per platform. No installer, no runtime, no dependencies — copy it to the test machine and run it.

version 0.1.1

This binary is designed to be flagged

Your own AV may quarantine it on download, and so may your browser. That is expected — it contains inert malware test signatures on purpose. Run it only on a disposable test machine and read the safety notes first.

Before the first real run, --explain prints every command, contact and change the suite would make without running any of it, and --list-targets prints every outbound destination it can ever reach. Both are safe on any machine, and they are what a security team needs in order to approve a run.

Linux

Windows

macOS

Verify what you downloaded

Checksums for every published binary: sha256sums.txt

Linux / macOS
sha256sum -c sha256sums.txt --ignore-missing
Windows PowerShell
Get-FileHash .\securitycheck-windows-amd64.exe -Algorithm SHA256

Next