Download Stenvakt

Free for Macs with Apple silicon and macOS 14 or newer. Version 1.0. Pick one of the two ways below; both give you the same app.

Install with one line

Open Terminal and paste this. It downloads the app, checks its checksum, puts it in Applications and opens it.

curl -fsSL https://stenvakt.com/install.sh | sh

This way macOS opens the app straight away, because a download made with curl is not marked as coming from the internet. Read the install script before you run it; it is short.

Or download the DMG

Download Stenvakt.dmg

1. Open the DMG and drag Stenvakt to Applications.
2. Open Stenvakt. macOS says it could not verify the app. Click Done.
3. Open System Settings, then Privacy & Security. Scroll down to the line that says Stenvakt was blocked and click Open Anyway.
4. Confirm with your password or Touch ID. From then on it opens like any other app.

You do this once because Stenvakt is signed on my Mac but not notarized by Apple. On macOS 14 you can also right-click the app and choose Open.

Check the download

The SHA-256 checksum of Stenvakt.zip is published next to it, and the install line checks it for you. To check by hand:

shasum -a 256 Stenvakt.zip
curl -fsSL https://stenvakt.com/download/Stenvakt.zip.sha256

The two values should match: see Stenvakt.zip.sha256

What you need

• A Mac with Apple silicon (M1 or newer) and macOS 14 Sonoma or newer.
• A Linux server you can reach over SSH with a key, as root or as a user with passwordless sudo. Stenvakt is built and tested on Ubuntu and Debian.
• Nothing on the server. No agent is installed; a fix installs only what it names, such as ufw or fail2ban.

After you install

The first time it opens, Stenvakt offers two things, both optional: a free account, so you get an email when a new version ships and can use email alerts, and an anonymous install count. You can skip both. The app checks stenvakt.com/version.json for new versions and offers to update itself; it checks the download before it swaps anything. What each of these sends is in the privacy notes.

Safe mode, Review and Preview are free and stay free. Pro adds features such as drift detection, scheduled backups and score history; it opens later. What changed in each version is in the changelog.

Uninstall

Quit Stenvakt and drag it from Applications to the Trash. Its settings and server list are in ~/Library/Application Support/Stenvakt; delete that folder too if you want them gone. Anything a fix installed on a server stays there until you remove it.