Every KDL tool is either an application to install on your computer, or a web app to use directly in your browser. The difference is shown clearly for each one, along with the right file for your system (Windows, macOS or Linux).
A file to download and then open. The app runs on your machine, with no account and no cloud: your data never leaves your computer. Choose the file for your system below.
Opens in your browser, on any device, with no download. Just click the link.
Download the file that matches your system. Windows, macOS (recent Apple chip or Intel processor) and Linux. 100% local, free.
These tools open directly in your browser, on a computer, tablet or phone.
Generate a clean QR code for a link, a contact or a text, directly in your browser.
Strong password generator, computed in your browser — nothing is sent over the Internet.
A script to run in a terminal. For people who use npm every day — if you don't know what npm is, this section isn't for you.
Detects on your machine the traces of npm worms from the Shai-Hulud / ChainDrop family — attacks that spread through the packages you install and steal your GitHub, npm, cloud and AI tokens.
# download, read the script, then run it
$ curl -fsSL https://raw.githubusercontent.com/Kdl-Tech/kdl-supply-check/main/kdl-supply-check.sh -o kdl-supply-check.sh
$ less kdl-supply-check.sh
$ bash kdl-supply-check.shNo dependencies, no network calls, changes nothing without
the --nettoyer option.
Linux, macOS and WSL. Written after auditing an entire fleet during the night of the
4 August 2026 attack — all six machines were clean, but checking took hours.
Double-click the .exe file. If Windows shows "Windows protected your PC", click More info then Run anyway — the app isn't signed by a paid publisher, but its checksum is published below.
Take the Apple (M1/M2/M3…) version for a recent Mac, or Intel for an older Mac. On first launch: right-click the app → Open, then confirm (Gatekeeper bypass for an unsigned app).
Make the file executable (chmod +x) then run it. The private browser is provided as an AppImage: a single file, nothing to install.
These applications run locally. The only exception is the KDL Privacy browser : it browses the Internet and checks for updates, that's its purpose. The others open a page on your own computer (address 127.0.0.1) — no data is sent over the Internet.
SHA-256 checksums for all files: SHA256SUMS.txt — or let us guide you: check my download.
All these applications are free, with no ads and no data collection. We build them in our own time, from Guadeloupe. If one of them has been useful to you, you can buy us a coffee — it's entirely optional and unlocks nothing.
❤️ Buy us a coffee Secure payment via Buy Me a Coffee · 100 % optional