Free for everyone. Open source. Windows 10/11 + Linux.
Download the Threat-Op-Setup-*.exe file from GitHub releases and double-click to run. ClamAV is bundled — no separate download needed.
Windows SmartScreen may show a warning since the app is new. Click "More info" → "Run anyway." The app is open source — review the source on GitHub.
Open Threat-Op from the Start menu. The green dot confirms ClamAV is online. Click Quick scan PC to run your first scan.
Run the screensaver installer, then go to Desktop → Personalize → Lock screen → Screen saver settings and select Threat-Op.
Ubuntu/Debian: sudo apt install clamav clamav-daemon
Fedora: sudo dnf install clamav clamd
Arch: sudo pacman -S clamav
Then update virus definitions: sudo freshclam
Download the .AppImage file. Mark it as executable: chmod +x Threat-Op-*.AppImage. Then double-click to launch, or run ./Threat-Op-*.AppImage from the terminal.
Download the .deb file. Install with: sudo apt install ./Threat-Op-*.deb or double-click in your file manager. Threat-Op will appear in your application launcher.
Electron apps on Linux require a one-time sandbox permission fix. If the app doesn't open, run these two commands in the terminal — replacing the path with your actual install location:
For .deb: sudo chown root:root /opt/Threat-Op/chrome-sandbox && sudo chmod 4755 /opt/Threat-Op/chrome-sandbox
For AppImage — find the sandbox file: find ~/.cache -name chrome-sandbox 2>/dev/null then run the same chown/chmod on that path.
Open Threat-Op from your app launcher or run it from the terminal. The green dot confirms ClamAV is detected. Click Quick scan PC to start your first scan. Quarantine operations use pkexec for elevation — your desktop will prompt for your password.
Download the screensaver installer from GitHub releases and run it. ClamAV is bundled — no separate download needed.
Right-click your Desktop → Personalize → Lock screen → Screen saver settings. Select "Threat-Op" from the dropdown and click OK.
Walk away from your PC. After your screensaver timeout, Threat-Op activates — scanning while displaying live global threat intelligence. Move the mouse to exit.