Keepvik

The Keepvik agent

A small Windows program (about 200 KB) that runs the security check. It installs nothing, runs only when you start it, and never changes anything without asking you on the PC.

Start the free Quick ScanYou get your personal download after a short sign-up.

Code signing

We're in the process of code-signing the agent. Until that's done, Windows SmartScreen may show “Windows protected your PC” because it doesn't recognise the publisher yet. To run it, click More info → Run anyway.

Windows 11 with Smart App Control turned on blocks unsigned programs completely, with no "Run anyway" option. On those PCs the scan will work once our signed version is out — please don't turn Smart App Control off for this (Windows can only turn it back on with a reset).

Only download the agent from this website.

What it reads on your PC

Technical information only. User folder names are replaced with a placeholder before anything is sent.

Computer basics
Computer name, Windows version and build, 32/64-bit, whether it is joined to a work domain, uptime, whether the signed-in user is an administrator, Secure Boot.
Network connections
For each connection: protocol, local and remote port, remote IP address, the program that opened it (name, publisher, whether it is signed) and a host name if Windows already knows one. Browser connections are only counted — never listed — so your browsing history is not collected.
Open ports
Ports that accept connections, which program owns them, and whether they are reachable from the network (for example Remote Desktop or file sharing).
Security settings
Microsoft Defender / antivirus status and definition age, firewall on/off per network profile, UAC, SMBv1, Remote Desktop settings, BitLocker on the system drive, guest account, AutoRun, Windows Update paused, pending restart, number of local admin accounts.
Startup & scheduled tasks
Names of programs that start automatically, the program file (arguments removed), publisher and signature.
Running software
Names of running programs, publisher, signature, which kind of folder they run from and CPU and memory use.
Network & DNS
Network adapters (name, local IP addresses, gateway, DNS servers — no MAC addresses), entries in the hosts file, proxy settings, ping times.
Performance
CPU, memory and disk usage, and the programs using the most CPU.

What it never reads

  • ✕ File contents, documents or photos
  • ✕ Emails, messages or chats
  • ✕ Passwords, cookies or saved logins
  • ✕ Browsing history or the pages you visit
  • ✕ Keystrokes, screenshots, camera or microphone
  • ✕ Program command lines or arguments

Where the data goes

Results are sent over an encrypted connection (HTTPS) to our servers only. Our rules engine and public threat-intelligence lists check them; our team reviews anything that needs attention. Read the privacy policy for who processes data on our behalf and how long we keep it.

What it leaves on your PC

Nothing is installed. The agent saves one small, encrypted ID file (C:\ProgramData\Keepvik\device.key) so a re-scan is recognised as the same computer. To remove everything, delete the downloaded file and that folder.

Fixes

The agent can only run actions from a fixed list of safe, reversible fixes (for example turning the firewall back on). Each one is shown to you on the PC with exactly what it will do, and runs only if you click Approve. There is no “run any command”.