Fast and lightweight open source malware scanner. Designed for Linux web server environments.

Battle proven and in production with some of the hosting industry's largest deployments.

» awaiting package

we ♥ your platform

Install

Single binary, no dependencies

Drop malwatch anywhere on your server. No packages to install, no agents to babysit. Signatures are included.

Install guide

Scan

Check every byte

Point it at a path or let malwatch monitor in real time.

Actions

Audit and defend

You decide the outcome of every detection. Choose from built in actions from alert to exile or easily create your own.

ALERT QUARANTINE CLEAN EXILE
Support For
AlmaLinux
Debian
Ubuntu
DirectAdmin
cPanel
Capabilities

feature packed

High performance

Scan for malware at any scale. We care about every metric.

View benchmarks

Featherweight footprint

Tiny ~25 MiB memory and low cpu profile even under full load. Built for the busiest servers.

Realtime monitoring

Monitor without added resource demand from large file counts or busy i/o. Network storage compatible.

Alerting everywhere

PagerDuty, email and custom JSON out of the box. Wire in your own via the simple and powerful API.

Integrates anywhere

Structured JSON logs, an ACID-compliant record store and cPanel drop-in support. Standalone or fleet-wide.

Devops first

Structured logging, unattended operation and auto remediation. Easy to integrate anywhere.

Complete privacy

Update signatures over git. No forced automatic updates and zero telemetry.

Get effective malware protection for your servers today