A security monitor for your PC.
Backed by real people, when you want them.
ThreatHunter is a free, lightweight security monitor for Windows 10 and 11. It watches the things scammers and malware actually do and tells you in plain English. And because you register when you install, there's a real IT department one call away if it ever finds something. Your choice, never a requirement.
Find out what your computer
is doing behind your back.
ThreatHunter works alongside your antivirus, not as a replacement for it. It covers the gaps AV doesn't: behavior, accounts, and the social-engineering tricks that don't involve malware at all.
Every outbound connection is checked against a live threat-intelligence blocklist, including connections that already ended before you looked.
Detects unauthorized remote-control software (the kind phone scammers talk people into installing) even when it is renamed or hidden.
New user accounts, new administrators, password resets, failed-logon bursts, and lockouts. ThreatHunter even turns on the Windows audit logging most PCs ship without.
Unusual outbound traffic patterns, suspicious ports, and odd DNS lookups that can indicate data leaving your machine.
Chrome and Edge add-ons that were sideloaded, can read every site you visit, or hold notification rights. These are the trick behind fake "your PC is infected" pop-ups.
Here's exactly how the
free part works.
What you give us
- Your name, email, and phone number, typed in by you, once, during install.
- That registers your copy so we know who to help when ThreatHunter finds something.
What stays on your machine
- Every finding, alert, and weekly report: none of it is uploaded.
- Your files, browsing, and passwords: ThreatHunter never reads them at all.
Why free? Because some of the people who use it will eventually want a team watching all their computers, and we'd like to be the ones they call. That's the whole business model: no ads, no selling your info, no upsell timer.
What you can do about it.
Every popup and report entry is written in plain English: what happened, where, and why ThreatHunter cared.
Forward the alert or your weekly report to us and it becomes a ticket with a real technician on the other end. That's what you registered for.
We'll walk you through remediation (removing the tool, locking the account, cleaning the extension) or remote in and handle it with you.
Four steps. About five minutes.
- 01Download and unzip
One zip file. Everything it needs is inside, and it never phones home to fetch code.
- 02Install and register
Right-click PowerShell, choose Run as Administrator, run the installer, and tell it who you are: name, email, phone. Thirty seconds, one time. That’s how a real person can help you when it matters.
- 03Let it watch
It runs quietly in the background on a schedule. If something needs your attention, you get a popup, in plain English.
- 04Read your weekly report
Every Monday (and right after install), ThreatHunter writes a plain-English security report you can open like any file.
What it doesn't do: ThreatHunter is a monitor, not an antivirus. It won't remove malware for you, and it doesn't watch for file encryption (ransomware) yet. When it flags something, that's your cue to dig in, or to use the backup you registered for.
The tool is free. The people are optional.
When ThreatHunter flags something, send us the alert or the weekly report, and we'll tell you what it means, how bad it is, and what the next steps are. And if you decide you'd rather have a real IT department watching all your machines all the time, you already know us.