Bytesnare

Windows · macOS · Linux

A free malware scanner for Linux

Bytesnare scans your Linux machine for malware, viruses and trojans, and tells you exactly what it found.

Free download for Linux Linux · 64-bit x86 and ARM — what it installs No account, no licence key, no trial period, nothing to buy.

Also for Windows and macOS.

What Bytesnare does, on a machine you control

Choose what to scan. See what was checked. Understand the result.

A file that could not be fully checked is never presented as clean. Whatever stopped the check — a permission, a lock, a file that changed underneath it — is what you are told, rather than a result that quietly stands in for one.

Nothing to sign up for, nothing to buy, and it tells you what it did not manage to check.

Free download for Linux

Linux · 64-bit x86 and ARM

The Bytesnare application. A sidebar lists Overview, Capabilities,
       Sensors, Delivery, Buffering, Privacy, Gaps and Support under Endpoint,
       then Scanning, Detections, Quarantine and Response under Protection —
       three of them badged not built and Detections badged degraded. The
       overview reads: running, observation only, no protection capability is
       claimed.
The four badges under Protection are the point, not an apology. Three of those capabilities this endpoint does not have, one is degraded and says why, and none of them is behind a padlock.

It shows you what it cannot do

A capability your hardware cannot support, or your policy will not permit, is a sentence you can read with the reason the endpoint itself gave — because finding out whether a security product covers you should not require an incident.

In writing, so it is not only a picture: every capability carries its own state and its own reason, and a capability the endpoint cannot offer says so rather than going quiet. What it does not do is the same list without the screenshot.

Where it runs

PlatformObserves
Windows 11 · ARM64 and x64Process and network
Linux · 64-bit x86 and ARMProcess and network
macOS · Apple silicon and IntelProcess and network

Three things that follow from how it is built

It never waits on the internet

Everything Bytesnare does on your machine works with the network off. It never pauses a decision to ask a server.

It tells you what it lost

When something is dropped, Bytesnare counts it and says where it went. A gap you can see is a gap you can act on.

Nothing it shows you is invented

If the app cannot reach the service it says so, rather than showing you a green tick it has not earned. A number it does not have is shown as unavailable, never as zero.