Download RakshaGuard Finder

AWS scanner — rakshaguard

Azure Compliance Finder — rakshaguard-azure

Verify & run

This tool reads your cloud account, so it is worth confirming the binary is ours before you run it. Two different things are being checked here: the signature proves the checksum file came from us, and the checksum proves your download arrived intact. The checksum alone cannot tell our build from someone else’s — whoever could replace a binary could replace the checksum file next to it — so the signature is the part that actually matters.

1. Import our release key (once, ever):

curl -sO https://rakshaguard.io/downloads/release-pubkey.asc
gpg --import release-pubkey.asc

2. Check the checksum file really is ours:

curl -sO https://rakshaguard.io/downloads/SHA256SUMS
curl -sO https://rakshaguard.io/downloads/SHA256SUMS.asc
gpg --verify SHA256SUMS.asc SHA256SUMS

Look for Good signature from "RakshaGuard Releases". A warning that the key is not certified with a trusted signature is normal — it only means you have not personally vouched for the key.

3. Check your download, and make it runnable:

shasum -a 256 -c SHA256SUMS --ignore-missing
chmod +x rakshaguard-*
./rakshaguard-darwin-arm64 scan  # run (example)

--ignore-missing matters: the file lists every binary in the release, and you will only have downloaded one of them.

On Windows: Get-FileHash rakshaguard-windows-amd64.exe -Algorithm SHA256 and compare with the matching line in SHA256SUMS.

Tip: save your license key once to ~/.rakshaguard/license and every scan picks it up automatically — no --license flag needed.

On macOS you may see an "unidentified developer" warning on first run (the binary isn't notarized yet). Right-click the file → Open, or run xattr -d com.apple.quarantine ./rakshaguard-*.