Install PoisonZero. v1.16.36
A lightweight daemon for the machine you want to protect. The one-line installer is recommended - it verifies the checksum automatically and sets up the service. Direct binaries with SHA-256 for your own or fully private distribution.
Quick install
- console.poisonzero.com - Create an install code in the panel - one code can enroll several devices.
- Run the command for your operating system - replace the example value with your install code.
- The daemon enrolls itself and starts as a service - the device shows up as “online” in the panel.
Enroll a device on your account →
The command now uses a real enrollment code for the selected device. Manage devices
Installs the binary only - enroll afterwards as described in the guide.
Installs the binary only - enroll afterwards as described in the guide.
Opens the tool if it’s installed - the command is only pre-filled, never run automatically.
The value shown is a format-true example - it comes from the panel.
How the on-device sandbox protects each OS →
Provisioning many daemons at once? Use the Admin API →
Agent integration (Claude Code, Codex, Gemini, Cursor)
Optional and opt-in: during install PoisonZero can add a “/poisonzero” command (short: “/pz”) to your local AI agents. It reports how many memory-poisoning attacks were blocked on this device - read-only and fully local, nothing leaves the machine. The interactive installer asks first (default: no); you can also pick the agents in the panel.
Linux
| Architecture | |
|---|---|
x86_64poisonzero-linux-amd64 |
Get ↓ |
ARM64poisonzero-linux-arm64 |
Get ↓ |
| Packages | |
.deb · x86_64poisonzero_1.16.36_amd64.deb |
Get ↓ |
.deb · arm64poisonzero_1.16.36_arm64.deb |
Get ↓ |
.rpm · x86_64poisonzero-1.16.36-1.x86_64.rpm |
Get ↓ |
.rpm · aarch64poisonzero-1.16.36-1.aarch64.rpm |
Get ↓ |
Windows
| Architecture | |
|---|---|
x86_64poisonzero-windows-amd64.exe |
Get ↓ |
ARM64poisonzero-windows-arm64.exe |
Get ↓ |
Checksums are also Cosign-signed: SHA256SUMS · Full guide
PoisonZero includes open-source components distributed under their own licenses. The direct-download archives bundle this notice alongside the binary; you can also download it on its own: Third-party licenses