Devseis Endpoint Auditor

Check your computer in 15 minutes

A free, safe check of your computer's security settings against ISO 27001, GDPR and the EU AI Act. An AI auditor writes a clear report with what to fix — on your computer, without sending anything anywhere.

✅ Only looks, never changesIt reads settings. Nothing on your computer is changed.
🔒 PrivateYour results stay on your computer. Nothing is uploaded.
⏱ About 15 minutesInstall in 2 minutes; the first check takes 5–15 minutes.
📄 A PDF reportA score, the main gaps and simple steps to fix them.
⬇ Download for Mac
Works on every Mac from 2017 on (Apple chip or Intel).
Prefer a .zip file?

  1. Download

    Click Download for Mac above. The file goes to your Downloads folder.

  2. Install

    Open the downloaded file (it ends in .dmg). A small window opens: drag the red app icon onto the Applications folder. Then you can close that window.

  3. Open it — the first time, macOS asks you to confirm

    Open Devseis Endpoint Auditor from your Applications folder (or Launchpad). Because this free app is not yet registered with Apple, you will see this message. Click Done:

    "Devseis Endpoint Auditor" Not Opened
    Apple could not verify "Devseis Endpoint Auditor" is free of malware that may harm your Mac or compromise your privacy.
    DoneMove to Bin

  4. Allow it once

    Click the Apple menu › System Settings › Privacy & Security. Scroll down and click Open Anyway, then type your Mac password:

    Privacy & Security
    "Devseis Endpoint Auditor" was blocked to protect your Mac.Open Anyway

    You only do this once. From now on the app opens normally.

  5. Run the check

    The first time, the app downloads its AI auditor (about 1 GB — a few minutes on Wi-Fi). Then click Run audit. Your Mac asks for your password: this only lets the app read the security settings.

    After 5–15 minutes your report is ready. Click Save report as PDF. If you are away, it saves itself to Documents › Devseis Endpoint Audit.

Comfortable with Terminal? Instead of steps 3–4 you can run xattr -dr com.apple.quarantine "/Applications/Devseis Endpoint Auditor.app".

⬇ Download for Windows
Windows 10 or 11, 64-bit. BETA
Built and packaged, not yet tested on many Windows PCs. Tell us if anything does not work.

  1. Download

    Click Download for Windows above. If your browser asks, choose Keep. The file goes to your Downloads folder.

  2. Start the installer — Windows asks you to confirm

    Open the downloaded file (it ends in .exe). Because this free app is not yet signed, Windows shows a blue box. Click More info, then Run anyway:

    Windows protected your PC
    Microsoft Defender SmartScreen prevented an unrecognised app from starting.
    ① More info
    ② Run anywayDon't run

  3. Install

    Click Next, keep the suggested folder, click Install and then Finish. A Devseis Endpoint Auditor shortcut appears on your desktop.

  4. Run the check

    Open the app. The first time, it downloads its AI auditor (about 1 GB). Click Run audit. Windows asks "Do you want to allow this app to make changes to your device?" — click Yes. The app only reads settings; it changes nothing.

    User Account Control
    Do you want to allow this app to make changes to your device?
    YesNo

  5. Save your report

    After 5–15 minutes, click Save report as PDF. If you are away, it saves itself to Documents › Devseis Endpoint Audit.

⬇ Download for Ubuntu / Debian
For Ubuntu, Debian, Linux Mint, Pop!_OS (64-bit).
Other Linux (Fedora, openSUSE, Arch…): download the AppImage

Ubuntu, Debian, Linux Mint, Pop!_OS

  1. Download

    Click Download for Ubuntu / Debian above. The file (ending in .deb) goes to your Downloads folder.

  2. Install

    Double-click the file. The App Center (or Software) opens: click Install and type your password.

    Or in a terminal: sudo apt install ~/Downloads/Devseis-Endpoint-Auditor-*.deb

  3. Run the check

    Open Devseis Endpoint Auditor from your applications menu. The first time, it downloads its AI auditor (about 1 GB). Click Run audit and type your password when asked — the app only reads settings.

    Authentication Required
    Authentication is needed to run "/bin/bash" as the super user
    CancelAuthenticate

  4. Save your report

    After 5–15 minutes, click Save report as PDF (or find it in Documents › Devseis Endpoint Audit).

Other Linux (AppImage)

  1. Download the AppImage

    Use the AppImage link above.

  2. Make it runnable

    Right-click the file › Properties › Permissions › tick Allow executing file as program. (Or: chmod +x ~/Downloads/Devseis-Endpoint-Auditor-*.AppImage.)

  3. Double-click it and run the check

    Same as above: click Run audit and save the PDF.

Questions

Is it safe? Why does my computer warn me?

The app is open source: anyone can read its code on Hugging Face. Mac and Windows warn about every app that has not paid for a developer certificate yet; the warning is not about anything the app does. You can check that your download is the real file with the SHA-256 code shown under each download.

Does it change anything on my computer?

No. It only reads settings (like password rules, firewall, disk encryption). It never changes them. The password prompt is needed because some settings can only be read by an administrator.

Where do my results go?

Nowhere — they stay on your computer. The app downloads two things (the AI auditor and a list of known security problems) but sends nothing about your computer.

What is in the report?

A score, the most important gaps, and for each problem: what was found, why it matters, how risky it is, and simple steps to fix it — mapped to ISO 27001, GDPR and the EU AI Act.

Do I need internet?

Only the first time (to download the AI auditor). After that, checks work offline.

I'm setting this up for a company

Before running, edit baseline.conf (approved admins, approved AI tools, rules) and organisational.conf (8 company questions). They are in ~/Library/Application Support/Devseis Endpoint Auditor on Mac, %APPDATA%\Devseis Endpoint Auditor on Windows and ~/.config/Devseis Endpoint Auditor on Linux.

What about my phone?

Open this page on your iPhone or Android phone — the phone check runs in the browser, nothing to install.

Not legal advice or a certification. Open source by Devseis: code Apache-2.0, data CC BY 4.0. Source · All releases