Bytesnare

Windows · macOS · Linux

Bytesnare does not run on Linux yet

There is no Linux build to download. Sensor work has reached first light in the lab — real process events on real kernels — but it is not a supported product, and calling it one would be the same overstatement this site exists to avoid.

See what runs on Windows No Linux build is published When there is a Linux build, it will be on this page. Until then this page is not a waiting room with a button in it.

Also for Windows and macOS.

What Bytesnare does, on a machine you control

Choose what to scan. See what was checked. Understand the result.

A file that could not be fully checked is never presented as clean. Whatever stopped the check — a permission, a lock, a file that changed underneath it — is what you are told, rather than a result that quietly stands in for one.

Everything above describes the Windows application. None of it is available on Linux today.

See what runs on Windows

No Linux build is published

The Bytesnare application. A sidebar lists Overview, Capabilities,
       Sensors, Delivery, Buffering, Privacy, Gaps and Support under Endpoint,
       then Scanning, Detections, Quarantine and Response under Protection —
       three of them badged not built and Detections badged degraded. The
       overview reads: running, observation only, no protection capability is
       claimed.
The four badges under Protection are the point, not an apology. Three of those capabilities this endpoint does not have, one is degraded and says why, and none of them is behind a padlock.

It shows you what it cannot do

A capability your hardware cannot support, or your policy will not permit, is a sentence you can read with the reason the endpoint itself gave — because finding out whether a security product covers you should not require an incident.

In writing, so it is not only a picture: every capability carries its own state and its own reason, and a capability the endpoint cannot offer says so rather than going quiet. What it does not do is the same list without the screenshot.

Where it runs

PlatformObserves
WindowsProcess and network
macOSNothing — there is no macOS build
LinuxNothing is published

Three things that follow from how it is built

It never waits on the internet

Everything Bytesnare does on your machine works with the network off. It never pauses a decision to ask a server.

It tells you what it lost

When something is dropped, Bytesnare counts it and says where it went. A gap you can see is a gap you can act on.

Nothing it shows you is invented

If the app cannot reach the service it says so, rather than showing you a green tick it has not earned. A number it does not have is shown as unavailable, never as zero.