SCANTIDE
Public beta · 0.8.4

Observe hostile activity. Decide with evidence. Block with control.

Scantide Guard is deterministic server protection for real mixed environments: modern Windows, Windows Server 2008 R2 Legacy, Linux, and centralized Datacenter management on both Windows and Linux.

Download GuardAdministrator manual

Install Scantide Guard 0.8.4

A new installation has a 30-day evaluation. Registered trials/licenses use floating seats, and an already validated trial/license gets up to 72 hours of offline grace if its licensing authority temporarily becomes unreachable.

Windows

Guard + Datacenter

The unified installer supports modern Guard/Datacenter and selects Legacy Guard automatically on Server 2008 R2 SP1.

Download Windows installer

SHA-256

ba805e33dcf7eb8f3bdb55b31df5a6c3a307c01a07f73f1149dfe57563410591
Get-FileHash .\ScantideGuard-0.8.4-Setup.exe -Algorithm SHA256
Linux Guard

Bootstrap install

The bootstrap reads the current manifest, downloads the Linux Guard package over HTTPS and verifies SHA-256 before installation.

curl -fsSL https://www.scantide.com/guard/install.sh | sudo bash

Review first:

curl -fLO https://www.scantide.com/guard/install.sh
less install.sh
sudo bash install.sh
Download tar.gz directly

SHA-256

2d0edf8556c6b13e8308fa7537b220290f25b95f3a9932520d3b0bcbec6574cb
Legacy Windows

Windows Server 2008 R2

The unified Windows installer detects Server 2008 R2 SP1 and installs the .NET Framework 4.8 Legacy Guard implementation, including TLS 1.2 compatibility work.

Download Legacy-compatible installer

SHA-256

54619204d8432b5e7e9e74ac17003af622fafb4afc4cc704224bd271f70dfebf
Linux Datacenter

Central management on Linux

Runs under the dedicated scantide-datacenter service account with persistent state under /var/lib/scantide/guard/datacenter.

Download Linux Datacenter

SHA-256

89f1d88920f924d9f53924557085c112012feb66b13a50373c5ed3219d23eeff
Public beta / Windows signing notice: Scantide Guard 0.8.3 beta Windows packages are not currently Authenticode-signed with a commercial CA-issued code-signing certificate. Windows, Microsoft Defender SmartScreen, browsers or endpoint-security products may therefore show Unknown publisher, reputation or uncommon-download warnings. This is expected for the beta and is not, by itself, evidence that a file is malicious. Scantide is deferring commercial Authenticode signing while the public beta and release process mature; it may be added later without replacing the independent Scantide integrity-signing system.
Verify before running: download only from scantide.com, use HTTPS, compare the downloaded artifact with the SHA-256 displayed on this page/update manifest, and do not continue if the source or hash differs. After installation, Guard can verify the Scantide-signed scantide-integrity.json and every immutable installed file against its published SHA-256 baseline. The integrity signature authenticates the Scantide release manifest; it is not a Windows publisher certificate and does not suppress SmartScreen warnings.
Security disclaimer: cryptographic verification materially improves tamper and supply-chain detection, but no release mechanism can guarantee that compromise is impossible. A compromised signing key, build environment, administrator endpoint or trusted release process could still undermine software integrity. Keep independent administrative access, protect release/signing keys, validate hashes/signatures, and use staged deployment appropriate to beta software.
Operational disclaimer: Scantide Guard is provided AS IS, including when licensed. Firewall enforcement, policy changes, certificate/TLS functions and integrations may affect availability or connectivity. Administrators are responsible for testing, backups and recovery. To the maximum extent permitted by applicable law, Scantide does not assume liability for service disruption, downtime, data loss, blocked legitimate traffic, lost revenue or other damages arising from installation, configuration or use. See the distributed LICENSE-AND-DISCLAIMER.txt for the full notice.

More than brute-force blocking

Guard combines local evidence, deterministic policy and external intelligence while keeping enforcement explainable.

Windows + Linux evidence

RDP/Windows logons, Kerberos, SQL Server, Exchange SMTP, IIS/RDWeb, SSH and supported web/application logs.

CrowdSec + AlienVault OTX

CrowdSec decisions can be consumed as an optional remediation source. OTX is enrichment-first, with explicit policy required for any OTX-only blocking.

Scantide intelligence

Geo, Tor, AbuseIPDB context, Scantide reputation, CVE/lifecycle assessment and transparent provenance are combined without AI guesswork.

Community Monitor Catalog

Share and download declarative custom monitors with provenance, review-before-enable behavior and multilingual rule variants such as en, sv and de-DE.

Datacenter on Windows or Linux

Distribute policy, integrations, licensing and managed monitors while preserving local monitors and local safelist authority.

Explainable enforcement

Guard records why an IP was observed, correlated and blocked, including the collector, matched web rule or external decision provenance.

Release file integrity

Published Guard components include a Scantide-signed integrity manifest. Guard authenticates the RSA-4096 manifest signature with a pinned public key, then verifies every immutable installed file against its SHA-256 baseline.

Evaluation and licensing

30-day evaluation

Fresh installations can operate immediately. The UI and emails show the remaining evaluation time.

Floating licenses

Registered trial and paid licenses use renewable seats and can be distributed through Datacenter.

72-hour offline grace

An already validated trial/license can keep enforcing for up to three days during temporary license-service or Datacenter connectivity loss.

Start with evidence, not guesses.

Use a controlled deployment, safelist management paths first, and review the administrator manual before broad country/Tor or custom blocking policies.

Download Guard Read the manual