Install cyguard
cyguard ships native binaries for macOS, Linux, and Windows.
All published binaries are signed:
- Windows — Authenticode-signed by Cybrium Inc via Azure Trusted Signing. SmartScreen and Defender both accept the cert without warning.
- macOS — Apple Developer ID notarised and stapled. Gatekeeper opens the binary cleanly on first launch.
- Linux — Sigstore-signed (cosign keyless) with provenance attestation.
macOS / Linux — Homebrew
brew tap cybrium-ai/cli
brew install cyguard
Windows — Scoop
scoop bucket add cybrium https://github.com/cybrium-ai/scoop-bucket
scoop install cyguard
Scoop pulls the latest signed binary from
GitHub Releases,
verifies the SHA-256 against the manifest, and places it on your PATH.
scoop update keeps you on the latest version automatically.
Windows — PowerShell one-liner
irm https://cybrium.ai/install.ps1 | iex
Installs every supported Windows cy* tool. To pick just cyguard:
& ([scriptblock]::Create((irm https://cybrium.ai/install.ps1))) -Tool cyguard
The installer downloads the latest signed .exe from GitHub Releases,
verifies the published SHA-256, verifies the Authenticode signature is by
CN=Cybrium Inc, and places the binary under
%LOCALAPPDATA%\Programs\Cybrium\ with the directory added to your
user PATH.
Pre-built binaries
Download from GitHub Releases.
| Platform | Architecture | Binary |
|---|---|---|
| macOS | Apple Silicon (arm64) | cyguard-darwin-arm64 |
| macOS | Intel (x86_64) | cyguard-darwin-amd64 |
| Linux | x86_64 | cyguard-linux-amd64 |
| Linux | arm64 | cyguard-linux-arm64 |
| Windows | x86_64 | cyguard-windows-amd64.exe |
Linux / macOS
curl -L https://github.com/cybrium-ai/cyguard/releases/latest/download/cyguard-linux-amd64 -o cyguard
chmod +x cyguard
sudo mv cyguard /usr/local/bin/
Windows (PowerShell)
$dest = "$env:LOCALAPPDATA\Programs\Cybrium"
New-Item -ItemType Directory -Force -Path $dest | Out-Null
Invoke-WebRequest `
-Uri "https://github.com/cybrium-ai/cyguard/releases/latest/download/cyguard-windows-amd64.exe" `
-OutFile "$dest\cyguard.exe"
[Environment]::SetEnvironmentVariable("Path", "$([Environment]::GetEnvironmentVariable('Path','User'));$dest", "User")
Open a new terminal afterwards so the updated PATH takes effect.
Verifying the Windows signature
Get-AuthenticodeSignature .\cyguard.exe
Expected: Status = Valid, SignerCertificate.Subject = CN=Cybrium Inc, ....
Windows — MSI installer
Download cyguard-windows-amd64.msi from GitHub Releases and double-click to install.
The MSI is Authenticode-signed by Cybrium Inc via Azure Trusted Signing —
Windows accepts it without a SmartScreen warning. Installs into
C:\Program Files\cyguard\ and registers in Add or Remove Programs
so administrators can deploy it via Intune, Group Policy, or msiexec.
Silent install / uninstall for fleet deployment:
msiexec /i cyguard-windows-amd64.msi /quiet /norestart
msiexec /x cyguard-windows-amd64.msi /quiet
Winget manifest (PR microsoft/winget-pkgs#381380)
and Chocolatey packages are submitted and awaiting moderator review. Until
they land, use the MSI above, Scoop, or the signed .exe.
Build from source
Requires Rust 1.75+. Cross-compilation supported for all three platforms.
git clone https://github.com/cybrium-ai/cyguard.git
cd cyguard
cargo build --release
# Binary at target/release/cyguard (or cyguard.exe on Windows)
Cross-compile to Windows from macOS / Linux
rustup target add x86_64-pc-windows-msvc
cargo install cargo-xwin
cargo xwin build --release --target x86_64-pc-windows-msvc
# Binary at target/x86_64-pc-windows-msvc/release/cyguard.exe
Verify installation
cyguard version
Windows (PowerShell):
cyguard.exe version