Redthread for Mac and Windows
The same platform as the web app, in its own window. Your estate, findings and scans stay on the server, so everything you do in the app is there in the browser too.
curl -fsSL https://millenniums-downloads.s3.amazonaws.com/desktop/Redthread-mac.zip -o /tmp/redthread.zip \
&& ditto -xk /tmp/redthread.zip /Applications \
&& xattr -dr com.apple.quarantine "/Applications/Redthread - Agentic Security Platform.app" \
&& rm /tmp/redthread.zip \
&& open "/Applications/Redthread - Agentic Security Platform.app"
One small binary per host. Detect-only.
Reports a laptop's or server's inventory and security posture to your workspace. It never blocks, kills or changes anything, has no kernel driver, and needs only outbound HTTPS. Mint the enrolment key in the console under Estate Scan → Laptops & servers.
sha256 928e23ec134f5751577238f6b63331d35f753f6b5e038dd7b283f930384309ae
Download
curl -fsSLo mai-endpoint https://app.redthreadsec.com/download/agent/mai-endpoint-$(uname -s | tr A-Z a-z)-$(uname -m | sed 's/x86_64/amd64/;s/aarch64/arm64/') \
&& chmod +x mai-endpoint \
&& ./mai-endpoint -print # shows what would be sent; sends nothing
MAI_KEY=ep_your_key ./mai-endpoint # then run it with your key
Version 2026.09.30. Check a download against SHA256SUMS. The binaries are not code-signed yet: macOS and Windows will ask you to confirm before the first run.
Opening it the first time
The installers aren't signed with an Apple or Microsoft certificate yet, so your computer asks you to confirm once. The Terminal command above skips this on a Mac; these are the steps if you use the .dmg instead.
Mac: open the .dmg and drag Redthread into Applications. Open it once — macOS says it cannot verify the developer, and the only button is Done. Now open System Settings → Privacy & Security, scroll to Security, and next to "Redthread - Agentic Security Platform was blocked" click Open Anyway, then confirm with Touch ID or your password. You only do this once.
Windows: if you see "Windows protected your PC", click More info, then Run anyway.
Signing in
Enter your email in the app and open the link we send you. Your browser asks to open Redthread; allow it and the app signs you in. The link works once and expires in 15 minutes.
Prefer the browser? The web app is the same product, with nothing to install.