Antivirus that respects your privacy.
IronWall is a free, open-source malware scanner that runs 100% on your machine. No cloud telemetry. No subscriptions. Just protection.
Windows 10 / 11 · 5 MB installer · MIT licensed
Real protection. No marketing fluff.
Every feature below runs locally. Your files never leave your device.
Daily-updated MalwareBazaar feed, hashed and indexed locally for instant lookup.
Pattern-based detection from Reversinglabs, signature-base, and the IronWall starter pack.
20-feature PE classifier (EMBER-style) catches threats no signature has seen yet.
Watches Downloads, Desktop, and other risky paths and scans new files the moment they land.
Folder-protection sliding-window detector flags mass-encryption behavior before it spreads.
Detected threats are sealed with AES-256-GCM. They can't re-execute and they can't escape.
Block known malicious domains and phishing hosts at the resolver level.
Inspects autoruns, scheduled tasks, services, and the running process tree, not just files.
Three steps, then forget about it.
5 MB installer. Sign it, run it, you're protected. No account, no email.
Quick scan, full scan, custom path scan, or always-on real-time. Your call.
Daily signature updates, scheduled scans, and silent quarantine — always local-first.
We can't sell your data. We don't have it.
Most antivirus vendors sell subscriptions today and "threat intelligence" tomorrow. We can't, because IronWall has no central database, no user accounts, and no analytics pipeline.
- Your files never leave your device.
No cloud uploads. No sandbox. Detection happens on your CPU.
- We don't have a database.
No accounts. No email collection. We genuinely don't know who uses IronWall.
- Open source. Read every line.
MIT licensed. The detection engine, the UI, the updater — all auditable.
Stop renting your antivirus.
IronWall is free, local, and open. Try it once and you'll wonder why anyone pays $80/year for software that mines their data.