PledgeShield
Personal device security auditor for Windows, macOS, and Linux — finds what antivirus misses.
What It Is
PledgeShield is a Rust-based host security auditor. It scans your device for misconfigurations, exposed services, unpatched software, privilege escalation vectors, and other attack surfaces that antivirus software doesn't look at.
Think lynis — but cross-platform, in Rust, one binary, no agent, no server.
Install
pip install pledgeshield
Quick Start
# Run a full security audit
pledgeshield scan
# Scan with CVE checking and compliance mapping
pledgeshield scan --cve --compliance --format html --output report.html
# Harden your system (120+ hardening modules)
pledgeshield harden firewall --harden --allow-ssh
pledgeshield harden ports --all
pledgeshield harden doh --enable cloudflare
pledgeshield harden sysctl --harden
pledgeshield harden ssh --harden
# Real-time monitoring
pledgeshield monitor
# Check your security posture score
pledgeshield harden posture
What It Detects
- Exposed services and open ports (RDP, SSH, Telnet, FTP)
- Unpatched CVEs in installed software
- Weak SSH configs, password auth, root login
- Suspicious scheduled tasks, cron jobs, systemd timers
- World-readable sensitive files (SSH keys, credentials, configs)
- Missing disk encryption
- Disabled firewall, UAC, Gatekeeper, AppArmor
- Rootkit indicators, process injection, hollow processes
- Ransomware canary files
- Data exfiltration patterns
- And 80+ more checks
Active Defense (120+ Modules)
| Category | Examples |
|---|---|
| Network | Firewall, DNS-over-HTTPS, ARP detector, rate limiter, geo-IP filter |
| Privacy | MAC spoofer, telemetry blocker, clipboard guard, metadata stripper |
| Detection | Rootkit scanner, ransomware canary, intrusion detector, log tampering |
| Hardening | Sysctl, SSH, SUID scanner, immutable files, mount options |
| Boot | UEFI/Secure Boot audit, boot log analyzer, TPM checker |
| Hardware | Thunderbolt guard, webcam guard, microphone mute, FireWire DMA block |
Platforms
| OS | Support |
|---|---|
| Linux | Full (x86_64, aarch64) |
| macOS | Full (Intel, Apple Silicon) |
| Windows | Full (x86_64) |
License
MIT
1 maintainer
Metadata
1 maintainer
Release files for pledgeshield 0.0.2
For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.
Source distribution (sdist)
| File | Size | Uploaded | Provenance | |
|---|---|---|---|---|
| pledgeshield-0.0.2.tar.gz | 3.4 kB | Without provenance | Details |
Built distribution (wheel)
| File | Interpreter | ABI | Platform | Reset |
|---|---|---|---|---|
| pledgeshield-0.0.2-py3-none-any.whl | Python 3 | none | any | Details |
Total release size: 7.2 kB
Release files / pledgeshield-0.0.2.tar.gz
| Download URL | pledgeshield-0.0.2.tar.gz |
|---|---|
| Size | 3.4 kB |
| Tags | Source |
|
SHA-256 checksum How to use checksums |
ee40f95c123a5f4caa017cfa1fb2bfa668f0f4a8b73b61685081a940d7a4a8b2
|
|
BLAKE2b-256 checksum How to use checksums |
3910b4a4c2c822864bf050325f223caf5e8fff2ae5d0ecf2d7e5207c3ea4ec3c
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
No |
| Uploaded via |
twine/7.0.0 CPython/3.13.14
|
Release files / pledgeshield-0.0.2-py3-none-any.whl
| Download URL | pledgeshield-0.0.2-py3-none-any.whl |
|---|---|
| Size | 3.8 kB |
| Tags | Python 3 |
|
SHA-256 checksum How to use checksums |
5467d3d74dc999bd53b55ba296e4bc86089bf90686f034c3a0df9e556ed224bb
|
|
BLAKE2b-256 checksum How to use checksums |
f20dc9c66260bbb1350933b74eedc17950432fa97dc03d6d9c949c2e8997b28e
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
No |
| Uploaded via |
twine/7.0.0 CPython/3.13.14
|
Security for pledgeshield 0.0.2
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
No provenance found
None of the files in this release were uploaded with provenance metadata.
A note on package security
PyPI is a repository for distributing packages, not a service for auditing them. While third-party security researchers and our staff do their best to detect and remove malicious packages, PyPI cannot guarantee the quality, security or suitability of any given package.
To learn more about protecting yourself from malicious actors, visit our package security documentation.
