Observe Preserve Control
A modern system toolset
for a more secure tomorrow
Privacy. Control. Freedom.
Hexrook is a focused, modular toolset for observing and understanding your filesystem — with privacy, evidence preservation, and control at its core.
Small tools.
Real insight.
Lasting control.
“Greater insight.
A more trustworthy system.”
Filesystem observation
Monitor directories and filesystems with explicit scope and native identity.
Evidence preservation
Detailed observations, durable queues, and retained original records.
Mount-aware scope
Understand native targets and their relationships in the bigger picture.
Security-focused
Designed with privacy and explicit trust at the core.
Lightweight & portable
Focused tools. Native collection. A command-line workflow.
Built for control
Persistent baselines, pinned policies, verification, and more.
Built for
those who care
what runs
on their system.
Know what’s on your system.
Hexrook gives you the tools to detect change, preserve evidence, and maintain control — with clear boundaries and privacy in mind.
The philosophy behind Hexrook →