Open-source, local-first security and system maintenance suite built for Windows.
Scan files, inspect processes, audit your system, manage your firewall, test password strength, and check known breaches privately.
See CHANGELOG.md for a full history of notable changes and release notes.
Soterios is currently available for Windows. The project is focused on providing the best possible Windows experience first, as many security and maintenance features rely on Windows-specific APIs, services, and system integrations.
Support for macOS and Linux may come in future releases as the project evolves. Expanding to additional platforms requires adapting features to each operating system's security model while maintaining the reliability and privacy-first approach of Soterios.
Download the latest Windows release:
| Platform | Installer | Notes |
|---|---|---|
| Windows | Soterios-Setup-1.2.1.exe |
NSIS installer · requires admin for system-level checks |
- Security Dashboard — health score, scan status, warnings, ignored warnings, quarantine count, and real-time protection controls
- Malware Scan — quick, full, and custom scans powered by ClamAV with definition updates, progress, cancellation, quarantine, and saved reports
- Reports — browse, view, generate, and delete scan and security reports in-app
- Process Inspector — risk-first sorting, then highest CPU/RAM impact within the same risk level
- Windows Security Audit — Defender, UAC, Windows Update, BitLocker, PowerShell policy, and Secure Boot
- Firewall Management — Windows Firewall profile status and rule summaries
- Network Monitor — active connections and interface activity
- Credential Safety Hub — local password generator, strength checker, HIBP k-anonymity password leak checks, and XposedOrNot email breach checks
- Real-Time Protection — toggles Windows Defender real-time monitoring on/off and verifies its state
- Quarantine Management — restore or permanently delete isolated files
- Tools & Maintenance — temp file cleanup, disk reports, large file finder, browser cache reports, startup items, network reports, Windows services reports, and network interface/connection reports
UI screenshots are not committed to the repo. For visual verification, see the Visual verification section in PR #82.
To capture for a future PR: run npm run capture:screenshots (or npm start manually) and attach PNGs to the PR (see tests/fixtures/screenshots/README.md).
Soterios does not collect telemetry or analytics. All scanning and system analysis happens locally on your machine. Network calls occur only when you explicitly trigger features that require them (ClamAV updates, HIBP checks, XposedOrNot lookups).
git clone https://github.com/chrisriv10/Soterios.git
cd Soterios
npm install
npm start# Windows (NSIS .exe)
npm run dist:win
Additional platform builds may be added in the future as cross-platform support develops.Built artifacts are output to the dist/ directory.
| Variable | Description |
|---|---|
SOTERIOS_DISABLE_GPU=1 |
Setting this will disable GPU acceleration (which is enabled by default), to force full software rendering. Set this if rendering glitches or crashes occur related to GPU drivers. |
SOTERIOS_USERDATA=<path> |
Allows for specifying a custom path to override the default user data directory (%APPDATA%\Soterios). This may be useful for running isolating instances to retain results. |
In order to utilize these environment variables during runtime, the start command can be modified as followed: set SOTERIOS_DISABLE_GPU=1 && npm start.
| Feature | Service | Privacy |
|---|---|---|
| Password leak checks | Have I Been Pwned – Pwned Passwords | Only the first 5 characters of the SHA-1 hash are sent (k-anonymity) |
| Email breach checks | XposedOrNot | Free public email breach API |
main.js Electron root entry point
src/preload/ contextBridge API exposed to the renderer
src/main/ IPC handlers, ServiceRegistry, and app/service orchestration
src/core/ database, event bus, tool registry, plugin loader
src/security/ scanning, quarantine, audit, firewall, network, process, and realtime services
src/tools/ built-in tool modules
src/scripts/ safe script modules and registry (maintenance, cleanup, reports)
src/ui/ shell, CSS, shared JS, and page modules
assets/ Soterios icons and bundled ClamAV files
tools/ build and install helpers (ClamAV download)
tests/ unit tests, smoke checks, and validation fixtures
build/ installer resources
These features are planned for future updates. There is no fixed release order. Features will be released as they are completed.
- Real-time folder monitoring
- USB device scanning
- Privacy settings hub
- Secure local credential vault
- CPU/GPU temperature monitoring
- Disk SMART monitoring and alerts
- Network traffic history
- Process history
- Startup impact analysis
- Duplicate file finder
- Secure file shredder (DoD overwrite)
- Startup manager
- System Restore manager
- Additional cleanup and optimization tools
- PDF report export
- CSV report export
- More charts and visual analytics
- System tray support
- Toast notification improvements
- Automatic updates
- UI polish
- Localization support
These are longer-term ideas that may require significant architectural work:
- Custom real-time protection
- Proprietary scanning engine
- Browser guard companion extension
- Cross-platform support (macOS/Linux) |
Order and scope may change based on feedback. Releases have no fixed dates
Contributions are welcome! To get started:
- Fork the repository.
- Create a branch for your feature or fix:
git checkout -b feature/my-feature. - Commit your changes with clear messages.
- Push to your fork and open a Pull Request.
Please make sure your changes work locally (npm start) before submitting.
Documentation: User and developer guides live in docs/wiki/ and on the GitHub Wiki.
Soterios is actively developed and continuing to mature.
The project is functional and usable, but some features are still being refined and additional improvements are planned for future releases.
Because of this, feedback and contributions are especially valuable.
- Stabilizing and improving the malware scanning system
- Expanding and refining system audit coverage
- Improving UI consistency and user experience
- Performance optimization across system monitoring tools
- Strengthening overall architecture and modularity
- Identifying and fixing bugs
If you're interested in system tools, security software, or Electron-based applications, contributions, testing, and feedback are welcome as the project grows.
Even small improvements, bug reports, or suggestions are appreciated.
Soterios is released under the MIT License.
Copyright © 2026 Christopher Rivera