Secblitz turns on the security and privacy settings your computer leaves off, in one click. It runs on Windows and Linux, removes unwanted apps and blocks ads, trackers and malware sites on your whole computer. Every change can be undone.

Download for Windows · Install on Linux · Website · Security · Contributing

1. Check. Secblitz looks at your computer's settings and shows which ones could be safer. It takes about a minute and changes nothing.
2. Review. Each setting says what it protects against and what changes for you.
3. Fix. One click fixes everything you approved. Secblitz then confirms each fix worked.
4. Undo. Every change is recorded. History puts your old settings back.

• One-click fixes for security and privacy settings. On Windows, more than 50: virus protection, firewall and network, sign-in, updates, startup, disk and privacy. On Linux, more than 60: firewall, updates, the system, the network, the screen lock, sharing, browsers and accounts. Anything already secure is left alone.
• Unwanted app removal. On Windows, removes bloatware that came with the PC and keeps a copy of each, so you can restore it later, even offline. On Linux, removes remote control and file sharing apps you don't use and can install them again.
• Free up space. Shows how much space old temporary files, install files, crash reports, old app and system versions and saved picture previews take, and removes the ones you choose.
• Ad and malware blocker. Blocks ads, trackers and malware sites in every browser and app.
• Background monitoring. Tells you if your protection gets worse.
• History of every change and every removed app.
• Six languages: English, Spanish, French, German, Portuguese and Italian. Light and dark mode.

Secblitz only looks at settings on this computer and changes them with your approval. It does not look at other devices, list open ports or test passwords.

Secblitz is not an antivirus. It turns on and configures the protection built into your system, and it leaves third-party antivirus and computers managed by work or school alone.

Download the installer (about 11 MB) and run it. For a PC with an ARM processor, like a Snapdragon laptop, use the ARM installer instead. Secblitz asks for administrator permission because it reads and changes system settings.

The installer is not code-signed yet, so Windows may show an unknown publisher warning. Choose More info, then Run anyway. To check the file, compare its SHA-256 with the one on the download page:

Get-FileHash .\secblitz-1.5.0-windows-x64-setup.exe -Algorithm SHA256

Each release also has a parts list (.cdx.json) on its GitHub release page that names every piece of code Secblitz is built from.

Using Secblitz 0.9.2 or older with Web protection on? It can't update itself to a newer version. Download and run the installer once; your settings, history and undo stay.

Open a terminal and run:

curl -fsSL https://secblitz.lol/install.sh | bash

On Ubuntu, which comes without curl, use this instead:

wget -qO- https://secblitz.lol/install.sh | bash

It finds your kind of Linux and processor, downloads the matching package, checks it against the fingerprint published with the release and installs it. It asks for your password once, to install. Running it again updates Secblitz. Then open Secblitz from your app menu.

Prefer to install the package yourself? Download it and open it with your software app, or install it from a terminal:

sudo apt install ./secblitz-1.5.0-linux-x64.deb   # Ubuntu, Linux Mint, Debian
sudo dnf install ./secblitz-1.5.0-linux-x64.rpm   # Fedora

Secblitz on Linux asks for your password before it changes anything, and checks for its own updates once a day if you turn that on.

Not available yet.

Secblitz supports Windows 10 version 22H2 and Windows 11, in the Home, Pro and Enterprise editions. It works from an administrator account or a standard account; on a standard account, Windows asks for an administrator's password before Secblitz changes anything. Microsoft stopped free security updates for Windows 10 on 14 October 2025 and Secblitz cannot replace them, so moving to Windows 11, or Microsoft's Extended Security Updates, keeps a Windows 10 PC safest.

Secblitz needs systemd and a desktop session. Screen lock and desktop privacy settings are made for GNOME and Cinnamon; on other desktops, Secblitz still checks and fixes the system, the network and the browsers. Web protection needs systemd-resolved, which these systems use by default.

Not supported yet.

Open Settings, then Apps, then Installed apps (on Windows 10: Apps, then Apps and features). Find Secblitz and choose Uninstall. Secblitz asks whether to keep your PC as it is now or put everything back the way it was. Either way, it removes itself.

You can also open Secblitz, go to Settings and choose Remove Secblitz from this computer. If you use the portable version, do that to put your settings back, then delete the secblitz.exe file.

Open Secblitz, go to Settings and choose Remove Secblitz from this computer, or remove it from your software app. From a terminal: sudo apt remove secblitz (Ubuntu, Linux Mint, Debian) or sudo dnf remove secblitz (Fedora). Removing the package keeps Secblitz's undo history, so a reinstall can still put your settings back.

On Windows 11, install:

• Rust (the pinned compiler in rust-toolchain.toml is selected automatically)
• Visual Studio Build Tools with "Desktop development with C++"
• Inno Setup 6.4 or later, only for the installer

git clone https://github.com/secblitz/Secblitz.git
cd Secblitz

# The app only: target\release\secblitz.exe
cargo build --locked --release

# Tests, the app and the installer: dist\
powershell -ExecutionPolicy Bypass -File scripts\build-release.ps1

To build the Windows app from Linux, or the Linux .deb and .rpm, see CONTRIBUTING.md and docs/RELEASING.md.

No account, no ads, no telemetry. Secblitz goes online to update itself (if updates are on), for actions you start, and to download block lists if web protection is on. See the privacy policy.

Free code signing provided by SignPath.io, certificate by SignPath Foundation. Releases are built from this repository by GitHub Actions, and each signing request is approved by hand. Read the full Code signing policy, also on the website.

For how well Secblitz works with the keyboard and other ways of using a PC, see the accessibility statement. For what is planned, see the roadmap. To report a security problem, see SECURITY.md. To build Secblitz or send a change, see CONTRIBUTING.md.

MIT. Fonts, icons, libraries and block lists from others are credited in THIRD-PARTY-NOTICES.md.