Download CySecTek for Windows
Free, with no account, no licence key and no trial period. Two packages: the .exe installs for the current user and needs no administrator rights; the .msi installs per-machine, for Intune or Group Policy, and does.
Windows will warn you. Here is why.
The installer is not code-signed, so SmartScreen shows “Windows protected your PC”. That is Windows correctly telling you nobody has vouched for the file — not a false positive to wave away.
Verify the SHA-256 below before you run it, and read the full explanation.
Step one
Verify what you downloaded
The installer is unsigned, so nothing in Windows vouches for it. What you can check is that the file you downloaded is exactly the file published here.
Get-FileHash .\CySecTek_0.8.1_x64-setup.exe -Algorithm SHA256Compare the output with the value on the right. A match means your download is complete and identical to the file this site publishes. It does not say who built that file — only a code signature could, and there is none yet. If the values differ, delete the file and download it again from cysectek.com. Do not run it.
- CySecTek_0.8.1_x64-setup.exe
- ad0ca1286fc2c4b59058de6952a978e4761f3690d39696fa93c5db0a96277ba2
- CySecTek_0.8.1_x64_en-US.msi
- 7706dd8ecfeed3a891d339268e7cf416c3e091a364dcbd2df59170d03687c13b
Before you install
What it needs
Two of the fourteen tools have an extra dependency. The rest work with what the installer puts on the machine.
- Operating system
- Windows 10 or Windows 11, 64-bit (x64).
- WebView2 runtime
- Microsoft Edge WebView2 runtime. Present on current Windows 11 and on Windows 10 with recent updates; where it is missing the installer fetches and installs it, which needs an internet connection during setup.
- Npcap (optional)
- Npcap, only for Port Finder and Packet Capture. Installed separately from npcap.com; everything else works without it. Installation steps.
- Administrator (optional)
- Not needed to install or run it. Packet Capture and Port Finder may need the app run as administrator, depending on how Npcap was installed; releasing or renewing a DHCP lease and flushing DNS from the Diagnose page always do.
- Disk space
- About 20 MB installed, plus the WebView2 runtime where Windows does not already have it.
- Network
- No internet connection required for normal use. The public-IP display and path check on the Overview, the internet checks and speed test on Diagnose, and Check for updates need one; everything else works on an isolated network.
Getting started
Installing, upgrading, first launch
Install
Run the .exe and accept the SmartScreen warning once you have checked the hash. It installs per-user, so it does not need administrator rights.
Installation guide →Set the app password
On first launch you choose a password. It is not a screen lock — it is the key your saved credentials are encrypted with, and it cannot be recovered. Put it somewhere safe.
First launch →Add Npcap if you need it
Only for Port Finder and Packet Capture. Everything else — scanning, SSH, SFTP, serial, TFTP, DHCP — works without it.
Installing Npcap →Upgrading from an earlier version
Install over the top; saved connections, host keys and settings are kept. Upgrading from before 0.7.0 introduces the app password for the first time, and any passwords you had saved are moved onto the new key as soon as you set it.
Upgrading and migrating →Deploying across a fleet
The MSI is there for Intune and GPO. Note that it is unsigned, which most deployment tooling will flag — that is worth knowing before you plan a rollout.
Enterprise deployment →Version 0.8.1 · 2026-09-30
What changed in this release
The site report is now a formal hand-over document, the wireless survey reports the customer's own access points with a channel plan, the survey reaches other private networks, and File Transfer handles whole folders.
- Site Report reads as an official document: a cover that counts the devices found by kind, an agenda, a page saying which reports are included, and sign-off.
- It carries your company name and logo, on the cover and the running header.
- The wireless survey groups the site's own access points, lists what each broadcasts, and plans a channel for every radio; neighbours are counted, not named.
- The survey reaches other private networks beyond the one this machine is on, and runs a full port scan of the servers and routers it finds.
- File Transfer can download, copy and move whole folders, not only files.