Core guide

Website · Documentation · Trust Center · Creator

MalGuard

MalGuard is an open-source defensive security project focused on safer game-mod analysis, local scanning, and fail-closed isolation. GTA Guard is the first product focus.

Security model

• Static file, archive, script, and PE-oriented inspection
• Extension/magic consistency checks and bounded malformed-input handling
• Fail-closed verdicts: SAFE, SUSPICIOUS, MALICIOUS, and INCONCLUSIVE
• Dedicated Worker isolation for browser-side scanning paths
• MalGuard isolation routing with MicroVM / portable VM foundations
• Optional Windows Sandbox backend where available; it is not required for the MalGuard VM path
• Runtime package integrity and sealed-package verification
• Signed update and anti-replay enforcement
• Supply-chain regression checks and pinned CI actions

MalGuard does not claim that a clean result proves a file is harmless. Isolation backends and host capabilities are certified independently and fail closed when required evidence is unavailable.

Safe development rule

Do not add, download, or execute real malware in this repository or its CI. Tests must use harmless synthetic fixtures only.

Validation

Run the engineering hardening suite locally with:

node tests/run-all.js

Additional release and platform-specific validation runs in GitHub Actions.

Open source

MalGuard is licensed under the MIT License.

Contributions are welcome through reviewed pull requests. See CONTRIBUTING.md.

Security reporting

See SECURITY.md. Do not publish suspected vulnerabilities before maintainers have had a reasonable opportunity to investigate and fix them.

Privacy

See PRIVACY.md.

Code signing policy

See CODE_SIGNING_POLICY.md.

The project is preparing an application for free open-source code signing. Until a signing provider accepts the project and a release passes the required signing/verification gates, unsigned release candidates must not be presented as fully signed public Windows releases.