Install
Windows (recommended: the installer)
- Download
SentinelVision-<version>-Setup.exe from the latest release.
- Run it. If Windows shows "Windows protected your PC", click More info → Run anyway (the app isn't code-signed yet — why).
- Keep "Start Sentinel Vision when I sign in and restart it if it is closed" ticked and click Install.
Windows asks for administrator permission once: Sentinel Vision installs into Program Files, where other programs
can't change it, together with the Sentinel Vision Protection service that guards its data and settings.
- In the app, open Settings & updates → Update now to download the latest threat definitions.
That's it — Sentinel Vision now starts hidden in the system tray every time you sign in, and updates itself.
Upgrading from 0.3.x (installed in your own folder) moves everything to Program Files automatically and keeps your
settings, quarantine and rollback vault — see the upgrade notes.
macOS, Linux, portable and from source
See the installation guide for step-by-step instructions for every platform, ClamAV setup,
updating, uninstalling and troubleshooting.
What it does
| |
|---|
| 4 detection engines | Hash blocklists (MD5/SHA-1/SHA-256) · YARA (bundled rules + YARA Forge + your own) · ClamAV (via clamd or clamscan) · static heuristics for unknown threats, with Windows Authenticode and catalog-signature checks to avoid false alarms on signed software |
| Calm, honest results | Threats are separated from items to review (machine-generated rule hints, dual-use tools, findings in installed programs' folders). Automatic quarantine only for exact known-malware matches, or strong matches on programs in your own folders — never caches, app databases or installed software. Audited weekly against everyday Windows apps (Steam, Office, Adobe Reader, VLC, …). |
| Tamper protection (Windows) | The Sentinel Vision Protection service keeps the rollback vault, quarantine and protection settings in a folder only Windows and administrators can open. Programs running with your rights can't delete them, and turning protection off, adding exclusions, restoring a quarantined file or quitting needs your administrator approval. It restarts the app if something closes it, and tells you. |
| Real-time protection | Watches Downloads, Desktop, Documents, temp and autostart folders; new or changed files are scanned the moment they finish writing and known malware is quarantined automatically |
| Behavior monitoring | Every new program is checked for attack techniques (malicious-document shells, download-and-run PowerShell, ransomware deleting backups, LOLBin abuse, reverse shells, miners) and its executable is scanned; confirmed malware is ended and quarantined. Auto-start locations are watched for new persistence. |
| Ransomware shield & rollback | Hidden decoy files plus fast and slow encryption detection — including ransomware that leaves the start of each file intact — catch ransomware in the act and freeze the program responsible; every good version of your documents is kept in an encrypted vault so you can roll back to before the attack |
| Web Shield & firewall | Hundreds of thousands of malware and phishing domains, blocked system-wide for every browser and app (optional), plus a local link checker that catches look-alike brands and homograph tricks. On Windows, known criminal networks (Spamhaus DROP, Feodo Tracker, Emerging Threats) are blocked in Windows Firewall by the protection service. |
|
How does it compare with Norton and McAfee? See the source-backed comparison.
Command line
Included with every install (sentinel-vision-cli; on Windows tick Add to PATH in the installer or run it from the install folder):
This is the beginning of the README. Read the rest at the original. Read the full README ↗
