DOWNLOAD

Run Ryvx yourself.

This site's hosted scans run on our own hardware, billed in credits. Running Ryvx yourself is separate and free forever — the desktop app or the CLI, on your own machine. This page is the download links for those, nothing else.

Windows

✓ shipped

The NSIS installer (.exe), built from this repo's src-tauri. Windows 10 and 11, 64-bit.

Download for Windows (.exe)

~156 MB. Hosted on the public ryvx-downloads repo — no GitHub account or sign-in needed to fetch it.

Windows will warn about an “unknown publisher” and try to block it. Choose More info → Run anyway. The installer isn't code-signed yet — that's an unbought certificate, not a problem with the file. Every unsigned Windows installer gets this warning; it isn't specific to Ryvx.

macOS

○ not built

Not built yet. There is no macOS download to link to, so this page doesn't pretend there is one.

Building and notarizing needs real Apple hardware and a developer account, not just effort — Paul has both and hasn't built it yet.

Linux

✓ shipped

CLI only — no desktop app, no .deb. A pip wheel/sdist, built from this repo and hosted on the same public downloads repo as the Windows installer — no source-repo access needed.

Download for Linux (pip wheel)

pip install ryvx-*.whl         # the file from the button above
ryvx --help
playwright install chromium   # optional, only needed for render_js_page

~860 KB. Hosted on the public ryvx-downloads repo — no GitHub account or sign-in needed to fetch it. The main harryc295/ryvx SOURCE repo is still private — installing the CLI no longer requires access to it.

✓ shipped~ partial○ not built

REVERSE ENGINEERING

The RE sandbox guest image.

Only needed for malware analysis / reverse engineering. Ordinary web and source scanning never downloads this. You shouldn't need this link at all in the normal case — the desktop app's Setup screen downloads and SHA-256-verifies it for you, against a signed manifest, the first time you opt into RE. This is the manual fallback: for restricted networks, or if you'd rather fetch and verify it by hand.

RE guest image

✓ shipped

A Debian bookworm root filesystem with the static analysis battery (file, strings, radare2, capa, FLOSS), Ghidra for decompilation, and angr for symbolic solving, plus the kernel and initrd to boot it in an isolated QEMU microVM. No malware ships inside it — this is the analysis environment, not samples.

View the guest image release

FILE	SIZE	WHAT IT IS
vmlinux	~8 MB	Linux kernel the microVM boots
initrd.img	~35 MB	Initial ramdisk
rootfs.ext4.gz	~1.5 GB	The analysis environment (≈8 GB uncompressed)
manifest.json	~1 KB	Sizes and SHA-256 hashes Ryvx verifies against

Public release, no sign-in required. ~1.5 GB downloaded, ~8 GB installed. Every file is listed in manifest.json with a SHA-256 — the app checks it automatically; to check by hand: sha256sum rootfs.ext4.gz.