avtool v1.1.0

Second release of avtool, the hash-based antivirus CLI and background watcher. Exact SHA-256 matching against a maintained hash list synced from MalwareBazaar. No heuristics, no behavioral detection: see the README for what this does and does not catch.

Free and open source (MIT). A paid tier with a premium threat feed and priority support is available at nexguardhq.com.

Changed behavior, read before upgrading

avtool watch now fails immediately if any path you pass does not exist or is not a directory. Previously it printed a warning and kept running, which meant a typo or an unmounted volume could leave you with a watcher that silently covered nothing. If you script avtool watch across paths that are not always present, that invocation will now exit with an error instead of partially working.

New

• avtool quarantine list --json emits machine-readable records, and an empty quarantine emits [] rather than prose (thanks @izzaldin, #67).
• avtool version reports the actual release version. Every v1.0.0 binary printed avtool dev regardless of build, which made "what version are you on?" unanswerable in bug reports (#75).

Fixed

• avtool watch validates its paths up front instead of warning and continuing (thanks @rootdevdb, #72).
• --db-path and --quarantine-dir help text is platform-neutral rather than describing only the macOS location (thanks @rootdevdb, #71).
• Tests are platform-neutral: the config path test and the macOS-only notification test no longer fail on Linux.

Project

• SECURITY.md with a disclosure process (thanks @FaarisK, #70) and CONTRIBUTING.md (thanks @VedantMadane, #66).
• GitHub Actions CI runs gofmt, vet, build, and go test -race on every push and pull request.

Server side

These shipped to nexguardhq.com and are not part of the CLI archives below: graceful shutdown on SIGINT/SIGTERM so a restart no longer kills in-flight requests (thanks @rootdevdb, #73), generated /robots.txt and /sitemap.xml (thanks @manmohm, #69), and test coverage for exact-duplicate Stripe webhook redelivery (#74).

Downloads

Platform	Architecture	File
macOS	Apple Silicon	avtool_v1.1.0_darwin_arm64.tar.gz
macOS	Intel	avtool_v1.1.0_darwin_amd64.tar.gz
Linux	amd64	avtool_v1.1.0_linux_amd64.tar.gz
Linux	arm64	avtool_v1.1.0_linux_arm64.tar.gz
Windows	amd64	avtool_v1.1.0_windows_amd64.zip

Verify against checksums.txt (SHA-256). Each archive contains the avtool binary, the README, and the LICENSE. Binaries are statically linked with CGO_ENABLED=0 and built with -trimpath from the v1.1.0 tag.

Desktop match notifications for avtool watch remain macOS-only; Linux and Windows still queue every match for avtool review.

avtool v1.0.0

First public release of avtool: a hash-based antivirus CLI and background watcher.

Exact SHA-256 matching against a maintained hash list, synced from MalwareBazaar. No heuristics, no behavioral detection — see the README for what this does and does not catch.

Free and open source (MIT). A paid tier with a premium threat feed and priority support is available at nexguardhq.com.

Downloads

Platform	Architecture	File
macOS	Apple Silicon	avtool_v1.0.0_darwin_arm64.tar.gz
macOS	Intel	avtool_v1.0.0_darwin_amd64.tar.gz
Linux	amd64	avtool_v1.0.0_linux_amd64.tar.gz
Linux	arm64	avtool_v1.0.0_linux_arm64.tar.gz
Windows	amd64	avtool_v1.0.0_windows_amd64.zip

Verify against checksums.txt (SHA-256).

Desktop match notifications for avtool watch are macOS-only in this release; Linux and Windows still queue every match for avtool review.