ByTE X Bit Technologies LLC ByTE X BitTECHNOLOGIES LLC ← Back to ByTE X Bit
● Free download · Windows & Linux

Posture Scanner

A small program you download and run on your own computer. It checks your machine's security settings — firewall, disk encryption, updates, accounts, and more — and tells you, in plain English, what's solid and what to fix.

🔒 Everything stays on your machine. The scan runs locally and the results are shown to you only. Nothing — no findings, no inventory, no telemetry — is ever sent to ByTE X Bit or anyone else. No account, no cloud, no phone-home.
Windows
bxb-scan-0.2.2.exe · 64-bit
Download →
Linux
bxb-scan-0.2.2 · 64-bit (amd64)
Download →

Signed releases are on the way. Until then, a fresh download may trigger a Windows SmartScreen prompt — that's expected for new, unsigned software. A SHA-256 checksum (SHA256SUMS-0.2.2.txt) accompanies each release so you can verify it. macOS support is coming.

How to run it

Windows

Double-click the downloaded
bxb-scan-0.2.2.exe
A menu lets you pick:
  1) this computer only
  2) computer + local network
then offers to save a report.

Linux

chmod +x bxb-scan-0.2.2
./bxb-scan-0.2.2
(shows the same menu; or use
 --host-only / --network / --html)

The menu offers to save an HTML report you can keep or print (or pass --html report.html directly). It runs fine as a normal user; on Windows, a few checks (like BitLocker) show more detail when run as Administrator.

What it checks
✓
Host firewall — on or off
✓
Disk encryption — BitLocker / LUKS
✓
Endpoint protection — antivirus active
✓
Updates — auto-update & pending patches
✓
Admin accounts — how many have admin
✓
Risky settings — SMBv1, SSH root login
✓
Installed software — inventory
✓
Local network — passive device discovery (opt-in)
✓
Plain-language fixes — for every gap
By default it checks the computer it runs on. Add --network for passive local-network discovery: it lists devices using your computer's ARP cache and standard service-discovery (SSDP/UPnP) — it never scans ports and stays on your local subnet. Active port scanning is a separate, opt-in step coming later, and it will always ask you to confirm it's a network you're authorized to scan.

Want us to run this across your whole business?

We do done-for-you posture assessments and remediation for small businesses — no security team required.

Talk to us →

🔒 Read-only and local-only. The scanner inspects settings and never changes anything. By default it makes no network connections; the opt-in --network mode only does passive discovery (no port scanning). Open source under the Apache License 2.0.