Blanktick is a free, open-source security check-up for Windows that runs entirely offline. Its rule: if it couldn't check something, it says so instead of showing a green tick. Version 0.1.3 is out today.
New: offline network checks
Without sending anything online, Blanktick now looks for:
- Router impersonation (ARP). Another device on your network answering for your router's address.
-
Hosts-file redirects. Entries in
C:\Windows\System32\drivers\etc\hoststhat send real websites to a fixed address. Entries that just block things (0.0.0.0,127.x) are ignored, and sensitive domains are rated higher. - Evil-twin Wi-Fi. A look-alike network nearby using your Wi-Fi's name.
- Proxy auto-config scripts. A PAC script that can quietly reroute your browsing.
It also remembers your router locally, so a later scan can tell you if it changed.
New: every check gets an answer on Windows 11
Earlier builds left a lot as "not checkable" on Windows 11, mostly because the probes were looking in the wrong places. That's fixed. Lock-screen settings now come from the power plan, Wi-Fi from netsh, shortcuts and app aliases are resolved to the real program, and every startup file gets hashed.
On the test PC (Windows 11 Home, standard user, not elevated), the packaged 0.1.3 build scanned:
| Checks shipped | 92 |
| Ran on this PC | 70 |
| Not checkable | 0 |
| Don't apply (with the reason shown) | 22 |
"Doesn't apply" is its own result: a phone-only check, a Home edition without Credential Guard, no USB drive plugged in. It is never counted as a pass.
Still true
- Offline: no account, no upload. The build fails if networking code is ever added.
- Read-only: it tells you what to change and you decide.
- Works with your AI agent: a read-only MCP server lets your agent explain the results. Blanktick. Your antivirus, built for AI.
Download (free, Windows x64): https://blanktick.org
Source: https://github.com/opemaid/blanktick
Top comments (0)