Overseer
Downloads
Every published build is listed with its version, size, date, SHA-256 and signer. No unsigned artifacts, and no download link that can change under you.
- Windows dev build
- Metadata only
- No TLS interception
There is no signed installer, no macOS or Linux client, and nothing that can hold a connection open while it asks you. Everything here describes what exists today, not what is planned.
Platform availability
Windows
Development build - no signed installerDevelopment build. Attribution, executable fingerprinting, local scoring, rules and Windows Firewall enforcement are implemented. Prompt-before-connect requires a Microsoft-signed WFP callout driver, which has not been built or submitted.
Requirements
- Windows 11 23H2 or later, x64
- Administrator approval for elevated capture and firewall enforcement
- Microsoft Edge WebView2 runtime
Builds
Nothing is offered here until an installer is code-signed by its platform authority and its release record is checked in.
macOS
Not availableNot implemented. The Network Extension content filter, its entitlement, and the notarized system extension described in Overseer.md section 5.2 do not exist yet.
Requirements
- macOS 13 or later, Apple silicon or Intel
Builds
Nothing is offered here until an installer is code-signed by its platform authority and its release record is checked in.
Linux
Not availableNot implemented. The eBPF attribution programs, nftables policy and NFQUEUE path described in Overseer.md section 5.3 do not exist yet.
Requirements
- Ubuntu 22.04/24.04, Debian 12 or Fedora 40+, kernel 6.1 or later with BTF and cgroup v2
Builds
Nothing is offered here until an installer is code-signed by its platform authority and its release record is checked in.
Before you install
Overseer installs a privileged component that inspects network metadata and, on Windows, can add firewall rules. Read what Overseer sends us and the system requirements first. Install and uninstall instructions ship with each signed build.
Installers are not secrets. When builds are published they will be downloadable without an account - your plan is checked when the app is activated, not at the download.
Building from source
The Windows development build lives in apps/overseer-desktop and is built with the .NET 10 SDK. It is unsigned, it is not an installer, and it is meant for machines you own. docs/overseer/dev-build-notes.md records exactly what it does and does not do.