Installing Bytesnare
What Bytesnare puts on the machine, what it does there, and what it takes away again.
Signed, or not published
The package installs, upgrades, rolls back and uninstalls cleanly, and that is verified on every change.
An unsigned installer for a security agent asks a person to click past their operating system's warning in order to install the thing that is supposed to raise warnings. Code signing is a commercial and custodial commitment rather than a build flag — a key has to be obtained, protected, and kept protected — so Bytesnare is published signed or it is not published.
What you install
| Component | What it is |
|---|---|
| Agent service | A headless Windows service. Observes process and network activity, keeps records locally, uploads nothing unless a destination is configured. |
bytesnarectl | A read-only diagnostics client. It cannot change configuration, start or stop the service, or perform any endpoint action. |
| Desktop application | Optional, on every platform. The same status the client prints, laid out. |
What it does to the machine
- Registers one Windows service and one ETW consumer.
- Writes records under
ProgramData, encrypted at the application level with keys held by the operating system's key service. - Opens no listening port and makes no outbound connection unless a destination is configured.
- Removes what it installed on uninstall. Collected data is preserved by default and removed explicitly — a command exists for that, so deleting your evidence is never a side effect of removing software.
Requirements
Windows 11 on ARM64 and x64. Linux and macOS on 64-bit Intel and ARM.
Questions
Is it free, and what is the catch?
Free, with no account, no licence key and no trial period. The catch is the one
on this page: there is nothing to download today.
Do I need the desktop application?
No. The engine runs headless and reports the same facts to a command-line
client. The application is a window onto those facts, and an installation
without it is a complete installation.
Will it slow my machine down?
There are resource targets. There is no measurement worth quoting yet, so this
page quotes none — what Bytesnare does not do explains
why a benchmark without its machine is a decoration.
Does it send my files anywhere?
No files leave, and nothing at all leaves unless a destination is configured.
The application has a screen showing what the upload policy withheld, counted
by reason. Security and privacy has the detail.
Can I run it alongside another antivirus?
Yes. It observes and reports; it does not claim a filter driver, intercept file
operations, or register as a security provider your existing product would have
to yield to.
What happens if it cannot reach the service?
It says protection status cannot be determined, and it does not say safe. An
endpoint that cannot check is not the same as one that checked and found
nothing, and it will not show you a green tick for the second when it has the
first.
Getting it
Download links appear on this page, and there are none on it today. There is no form and nothing to sign up for either: collecting addresses for an announcement is not worth a database of people who trusted us with one.
Write to hello@bytesnare.com with anything this page does not answer.