Posture Scanner
A small program you download and run on your own computer. It checks your machine's security settings — firewall, disk encryption, updates, accounts, and more — and tells you, in plain English, what's solid and what to fix.
This tool is new and not yet code-signed, so the first time you run it Windows may show a blue "Windows protected your PC" screen. This is normal for new software from small publishers and does not mean the file is unsafe.
To run it: click "More info," then "Run anyway."
Official code-signing is on the way, which will remove this prompt entirely. Each release also ships with a SHA-256 checksum (SHA256SUMS-0.2.3.txt) so you can verify the download hasn't been tampered with. macOS support is coming.
Windows
Double-click the downloaded bxb-scan-0.2.3.exe A menu lets you pick: 1) this computer only 2) computer + local network then offers to save a report.
Linux
chmod +x bxb-scan-0.2.3 ./bxb-scan-0.2.3 (shows the same menu; or use --host-only / --network / --html)
The menu offers to save an HTML report you can keep or print (or pass --html report.html directly). It runs fine as a normal user; on Windows, a few checks (like BitLocker) show more detail when run as Administrator.
--network for passive local-network discovery: it lists devices using your computer's ARP cache and standard service-discovery (SSDP/UPnP) — it never scans ports and stays on your local subnet. Active port scanning is a separate, opt-in step coming later, and it will always ask you to confirm it's a network you're authorized to scan.Found something worth fixing?
Whether it's your own computer, your household's devices, or a whole business, I'm a security professional in Maryland who can handle the fixes for you. A short paid triage confirms exactly what's needed, and the fee credits toward the work.
Get help securing your systems →🔒 Read-only and local-only. The scanner inspects settings and never changes anything. By default it makes no network connections; the opt-in --network mode only does passive discovery (no port scanning). Open source under the Apache License 2.0.