Local by default
System data is measured and stored only on your PC. There is no telemetry and no account.
Security and privacy
A tool that looks deep into Windows has to be trustworthy itself. This is how Nexus is built, what it never does, and how to report a problem.
How Nexus is built
- Standard user rights. The app runs without administrator rights. An optional administrator mode is off by default and only you can switch it on.
- A closed interface. The interface cannot run commands, start programs or read files. It can only call a fixed list of checked functions.
- Confirmation and audit log. Every change to the system needs your confirmation and is written to a local audit log; system processes are protected.
- Credentials with Windows. Sign-in data is kept only in the Windows Credential Manager. The app contains no secrets.
- Signed detection lists. Driver lists and detection rules are only accepted with a valid Ed25519 signature, never as an older version.
- Reviewed. The security-critical parts were reviewed separately; the findings were fixed and documented.
What Nexus never does
- Switch off or weaken Microsoft Defender, Windows Update, UAC or SmartScreen
- Call a file or a PC “safe”: Nexus is not an antivirus
- Change the system automatically or without asking
- Send telemetry or upload files without your explicit confirmation
- Use vulnerable third-party drivers; the optional sensor driver only reads
- Show ads or bundle other software
Privacy first
Only what you use
Data leaves the PC only for features that need it, such as a VirusTotal lookup, which sends the checksum and the file only after you confirm.
Every case listed
The privacy notice names each recipient and the exact data. Read the privacy notice.
Why the installer is unsigned
The project does not have a code-signing certificate yet. Windows therefore shows a SmartScreen warning and Unknown publisher in the administrator prompt. This is expected for unsigned software and says nothing about the file itself.
Protect yourself: download only from this website or the announcements channel on Discord, and check the SHA-256 checksum.
Report a vulnerability
Found a security problem in Nexus-DEV-Tool? Please report it privately, never in a public channel.
- Join the Discord server and go to the support channel.
- Open a ticket with the category Security concern. Only you and the team can see it.
- Describe what you found, the Nexus version and how to reproduce it. Don't share it anywhere else until it is fixed.
Not on Discord? Write to [email protected].
Suspect malware on your own PC? Run a scan with Microsoft Defender and use the emergency assistant in Nexus. Please do not upload suspicious files to Discord.