DOWNLOAD

Run Ryvx yourself.

This site's hosted scans run on our own hardware, billed in credits. Running Ryvx yourself is separate and free forever: the desktop app or the CLI, on your own machine. This page is the download links for those, nothing else.

Windows

shipped

The NSIS installer (.exe), built from this repo's src-tauri. Windows 10 and 11, 64-bit.

View Windows release (.exe)

365 MB. Hosted on the public ryvx-downloads repo. No GitHub account or sign-in needed to fetch it.

Already on 0.3.13 or earlier? Auto-update cannot reach this release, and sign-in is broken in those builds. Download the installer above and run it over your existing install; your data is kept.

The installer isn't Authenticode code-signed yet, so Windows will warn about an “unknown publisher”. Before you choose More info → Run anyway, check the file's SHA-256 against the table under “Verify what you downloaded” below. If it doesn't match, delete it and don't run it.

macOS

partial

The notarized .dmg, built from this repo's src-tauri (Apple: Accepted, stapled, Gatekeeper accepts it as Notarized Developer ID). It is behind Windows: macOS is on the release linked below while Windows is on 0.3.19.

View macOS release (.dmg)

~124 MB, version 0.3.13. Apple Silicon (aarch64) only. Auto-update does not currently reach macOS: the update manifest has no macOS entry until a Mac build of the current version is published, so an installed copy will not be offered a newer one. Check this page for a newer .dmg and install it over the top. The CLI runs on macOS today, confirmed on real Apple Silicon hardware on 2026-09-02, not inferred from the wheel being pure Python. One catch if you're on the CLI: macOS ships Python 3.9 and Ryvx needs 3.11 or newer, which fails with a confusing error about litellm rather than about Python. The macOS steps on the install page handle it.

Linux

shipped

CLI only: no desktop app, no .deb. A pip wheel/sdist, built from this repo and hosted on the same public downloads repo as the Windows installer, no source-repo access needed.

View Linux release (pip wheel)

pip install ryvx-*.whl         # the file from the button above
ryvx --help
playwright install chromium   # optional, only needed for render_js_page

~5.2 MB. Hosted on the public ryvx-downloads repo. No GitHub account or sign-in needed to fetch it. The main harryc295/ryvx SOURCE repo is still private. Installing the CLI no longer requires access to it.

✓ shipped~ partial○ not built

Verify what you downloaded

Every release asset has a published SHA-256 digest. A matching hash proves the file on your machine is byte-for-byte the one named here; it does not prove this page is trustworthy, since anyone editing this page could edit the hash beside it too. Start from a source you already trust, such as the release links above.

FILE	SHA-256
Ryvx_0.3.19_x64-setup.exe	80dff19f72ed7ff7af86df5c6e438a04517f519900eaeb019de8fbdf0ba2a57c
Ryvx_0.3.13_aarch64.dmg	91cf9b726d12eb6bc35048ee6be9890cf0ec864083e7e329831ff1ccee1e5efc
ryvx-0.3.12-py3-none-any.whl	686ee44fa98ba7472843dd9ec0eebb24bcf1671219b61f7ad84d37c7b1b6a9e5
ryvx-0.3.12.tar.gz	edf21b7ea5950707230a2f50fa8295d8623c966371395f339e795615b469640c

Windows (PowerShell):   Get-FileHash .\Ryvx_0.3.19_x64-setup.exe -Algorithm SHA256
macOS / Linux:          shasum -a 256 <file>   # or: sha256sum <file>

Get notified about new releases

New builds land on this page first. We'll email you the release notes when one ships, nothing else.

REVERSE ENGINEERING

The RE sandbox guest image.

Only needed for malware analysis / reverse engineering. Ordinary web and source scanning never uses it.

RE guest image

not published

A Debian bookworm root filesystem with the static analysis battery (file, strings, radare2, capa, FLOSS), Ghidra for decompilation, and angr for symbolic solving, plus the kernel and initrd to boot it in an isolated QEMU microVM. No malware ships inside it: this is the analysis environment, not samples.

There is no prebuilt download right now: the earlier release was withdrawn. Until a new one is published, ryvx setup says so and prints the steps to build the image locally.