FREE BASIC EDITION • PRO VIA FREE ACCOUNT OR PROTECTION PLAN

QuickScan.
Free for quick checks.
Pro for everything.

🏠 COMPLETE HOME VISIT SOLUTIONHOME VISIT READY8 hs-* field presets with rich field_scoping_summary + recommended_on_site_actions + home_visit_resolution decision matrix + explicit Tier-1 (wifi-network-history, scheduled-tasks-deep, security-software-tampering...) + Tier-2 (bluetooth-connection-history, consumer-cloud-kfm-abuse, macos-home-user-deep, email-auto-forward-webmail...) collectors. Full Pro Cyber Audit Trail (sortable Module Explorer with SLOW OUTLIER / HIGH IMPACT / hs-* flags, clickable columns, in-app diff, Timeline Correlation, one-click CSV/JSON + sidecars, CLI --export-audit --audit-diff). 100% local-first portable triage for examiners. One good scan largely resolves most typical home/SMB visits. Run from USB. Rich reports saved to your drive first. Explicit consent upload only. ~40-mile dispatch integration in Pro.

Download QuickScan Free
(Basic Tools)

Windows • macOS • Linux • Portable USB / Zero-Install • 5–12 min scans • ~40-mile rapid response ready

100% LOCAL FIRST • CONSENT-AUDITED
PORTABLE USB • AUTO-SAVE TO DRIVE
RICH HTML + JSON + TXT REPORTS (LOCAL)
40-MILE DMV RAPID RESPONSE (PRO HIGH)
CODE-SIGNED + NOTARIZED • EXAMINER-GRADE
✓ Code-Signed + Notarized✓ Examiner-Grade 40+ 2026 Scanners + 8 hs-* HOME VISIT READY Presets✓ Local-First USB/Drive Save✓ Consent-Audited Upload✓ 40-Mile DMV Rapid Response
CHOOSE YOUR EDITION

QuickScan Free vs QuickScan Pro

Same trusted local-first engine. Free (Basic) is genuinely useful for everyday checks (curated scanners + basic presets + full local/USB reports).Pro (Full) (via simple offline quickscan.lic license file after free account, or paid Protection Plan) unlocks all 40+ scanners, the 8 hs-* Home/SMB Field Presets with rich field_scoping_summary + recommended_on_site_actions + Impact Timeline, and complete 2026 threat power. All editions: strictly IDENTIFICATION / TRIAGE ONLY. Full matrix in client docs.

FREE • NO ACCOUNT
Free
QuickScan Free — Generous Basic Edition (No Signup)
Great for quick personal or small-business checks. Direct download or USB. Curated high-value basics + full local reports + USB CoC. Runs immediately. Explicitly limited: NO hs-* Home/SMB Field Presets, NO rich field_scoping_summary / recommended_on_site_actions / home_visit_resolution decision matrix, NO full Pro Cyber Audit Trail (only basic metadata). Upgrade to Pro for everything examiners need on-site.
You Get
  • ✓ Core timeline, USB history, browser artifacts
  • ✓ Simple persistence & basic execution detection
  • ✓ Rich local HTML + JSON reports saved to your drive
  • ✓ Full portable USB mode (zero install)
  • ✓ Modern GUI with consent + USB auto-save
Not included: Advanced 2026 threat fingerprinting, the 8 Home/SMB Field presets with plain-language scoping summaries, priority dispatch, signed Pro kits.
Download QuickScan Free Now →
RECOMMENDED FOR MOST VISITS
PRO • FREE ACCOUNT OR PAID PLAN
Pro
QuickScan Pro — Full Professional Power
The complete toolkit for examiners and field teams. Create free account at the main site (or use Protection Plan) to get license key + full Pro with enterprise Pro Cyber Audit Trail (moduleTimings with %, sortable GUI Module Explorer with SLOW OUTLIER / HIGH IMPACT / PRESET-ASSOC hs-* flags + clickable columns, in-app diff, Timeline Correlation, one-click CSV/JSON exports + automatic sidecars, CLI --export-audit --audit-diff) + rich Home Visit Resolution. Pro USB kits are explicitly HOME VISIT READY and ship the authoritative HOME_VISIT_CAPABILITY_AUDIT_2026-05.md + LICENSE_CRYPTO.md. One good scan + rich handoff largely resolves most typical home/SMB visits. ~40-mile DMV Rapid Response dispatch integration on HIGH.
Everything in Free +
  • ✓ All 2026 ransomware, infostealer, LOLBin & deep exfil tools (rclone/SRUM/USN/VSS)
  • All 8 hs-* HOME VISIT READY / HOME VISIT OPTIMIZED Field Presets (hs-ransomware-quick-scope, hs-data-theft-timeline, hs-rmm-rat-audit, hs-usb-dropper-investigation, hs-pre-litigation-access-review, hs-insider-smb-staging, hs-initial-access-vector, 40-mile-rapid-response-baseline) with plain_language_purpose + on_site_actions_hint + rich field_scoping_summary + recommended_on_site_actions + home_visit_resolution decision matrix
  • Explicit Tier-1 Collectors (wifi-network-history for mobility, scheduled-tasks-deep, security-software-tampering v1.2.0, recent-documents-jump-lists-deep parity, powershell-transcript-history-deep parity, remote-video-support-artifacts)
  • Explicit Tier-2 Collectors (bluetooth-connection-history, consumer-cloud-kfm-abuse + consumer-cloud-abuse-deep for KFM/FilesOnDemand/iCloud/DriveFS, macos-home-user-deep for Safari/iCloud/LoginItems/TCC, email-auto-forward-webmail + rules for exfil confirmation) + full 2026 TTPs (ransomware_2026_ttps etc.)
  • ✓ Rich Field Scoping Summary + Impact Timeline + one-click Export Home Visit Resolution Brief in every report
  • ✓ One-click "Promote to Case" / generate_case_prefill_payload from GUI with full prefill for seamless examiner handoff
  • ~40-mile DMV Rapid Response dispatch activation on HIGH findings + priority admin tracking + case linking
  • Full Pro Cyber Audit Trail (major differentiator): moduleTimings (ms + %), presetUsed (critical for hs-*), scanStart/End + reportGeneratedAt ISO timestamps, proFeaturesUsed, enhanced provenance & CoC. GUI: dedicated "Cyber Audit Trail" tab with sortable Module Explorer (clickable columns, auto-flags SLOW OUTLIER / HIGH IMPACT / PRESET-ASSOC for hs-*), in-app diff of prior reports, Timeline Correlation, one-click EXPORT STRUCTURED AUDIT (CSV + JSON) + automatic sidecars, CLI --export-audit --audit-diff. Prominent in Pro HTML reports. Free has basic metadata only. Enterprise-grade for legal, insurance, audit, dispatch.
  • Pro USB kits explicitly Home Visit Ready: ship with quickscan-pro.license, HOME_VISIT_CAPABILITY_AUDIT_2026-05.md + LICENSE_CRYPTO.md, full hs-* + audit artifacts
  • ✓ Signed Pro builds, license keys (Ed25519 signed, air-gapped/USB friendly), pre-built USB kits

Free account or existing Protection Plan members get instant access.

Pro Cyber Audit Trail (enterprise differentiator — Pro only): Full moduleTimings with % of total scan, presetUsed (hs-* critical), proFeaturesUsed, precise ISO timestamps, provenance/CoC. GUI Cyber Audit Trail tab: summary cards + sortable Module Explorer (clickable columns on Duration/%/Findings; auto SLOW OUTLIER / HIGH IMPACT / PRESET-ASSOC hs-* flags; live filters "Slow Outliers"/"High Impact Only"/"hs-* Only"), visual bar chart, in-app diff (load prior .json for human-readable comparison), Timeline Correlation (flags unusually long + HIGH-impact overlap). One-click EXPORT STRUCTURED AUDIT (CSV + JSON) + automatic sidecars in bundles. Full CLI: --export-audit, --audit-diff. Prominent "🛡️ PRO CYBER AUDIT TRAIL & HOME VISIT RESOLUTION" in Pro HTML reports. Free tier: basic metadata only. See quickscan-client/docs/QUICKSCAN_FREE_VS_PRO.md + PRO_CYBER_AUDIT_QUICK_START.md.
NO ACCOUNT • INSTANT DOWNLOAD

Download QuickScan Free (Basic)

Need the full Pro toolkit? See Pro section →

Basic edition includes core timeline, USB history, browser artifacts, simple persistence detection, and limited presets. Excellent for quick personal or small-business checks. Full local-first workflow: scans run offline, rich reports auto-save to your USB/drive. Optional consent upload uses standard queue.

Portable USB (Basic)
Zero-install. Extract & run anywhere. Auto-saves Basic reports to USB. Recommended for most users.
Get Portable USB Kit (Basic)
Windows Basic Client
Signed EXE + installer build instructions. Core collectors + local HTML viewer.
Build / Download Windows Basic
macOS + Linux Basic
Universal DMG/pkg & AppImage builds. Same trusted local report engine.
Build macOS / Linux Basic
Free Basic builds come from the public canonical repo. Reports include core timeline, USB, browser, and simple persistence findings. Pro unlocks the rest. SHA256SUMS + docs included. Still 100% local + consent-gated upload.
PRO ONLY • LICENSED BUILDS

QuickScan Pro Downloads + License Key

Create free account at the main site (or use Protection Plan) to get license key + full Pro with enterprise cyber audit trail (module timings, preset tracking, scan provenance, etc.). Instantly access signed installers, pre-built USB kits, and priority tracking.

Pro Portable USB Kit — HOME VISIT READY

Pre-imaged signed GUI client + all 8 hs-* presets + full Pro Cyber Audit Trail + ships authoritative HOME_VISIT_CAPABILITY_AUDIT_2026-05.md + LICENSE_CRYPTO.md. One scan largely resolves most home/SMB visits.

Windows / macOS Pro Installers

EV-signed EXE + notarized DMG/PKG with license pane + Pro branding + full hs-* + audit tools

License Key + Admin Access

Priority upload queue, one-click Promote to Case, case linking, ~40-mile dispatch activation on HIGH + rich handoff artifacts

Already have a Protection Plan? Log in at the member portal or use your existing license key in the Pro Client for instant full access and priority ~40-mile dispatch.Go to Members Portal →
FOR EVERYONE — NO TECH EXPERIENCE NEEDED

What Happens After the Scan

1. Local report + USB save (automatic for Free & Pro): Scan finishes → beautiful standalone interactive HTML (timeline, findings, risk score) + JSON/TXT/checksums written directly to your USB or chosen drive first. Nothing leaves until you decide.

2. Optional explicit upload: One clear “Upload for Examiner Review” button + consent checkbox. Only structured findings (no raw files). Always your choice.

3. Dashboard review: Uploads appear in our secure QuickScan examiner console with full payload, consent timestamps, and risk signals.

4. ~40-Mile DMV Rapid Response (Pro only): HIGH findings from QuickScan Pro trigger priority ~40-mile DMV field dispatch (Sterling 20164 center: Loudoun, western Fairfax, Prince William, DC core, parts of Montgomery/Frederick). Often <60 min arrival with tracking + case linking. Free Basic users receive expert guidance and can easily book full response.

Upload always optional. QuickScan = triage/identification only. Professional write-blocked imaging under chain-of-custody available when needed.

How QuickScan Works (Simple)

01
Run the scan locally

From USB or installed client. Free = core tools. Pro = everything. 100% offline.

02
Review the rich report

Beautiful interactive HTML saved to your drive. See timeline, findings, and (in Pro) plain-English scoping summaries.

03
Decide what to share

Everything stays on your device until you click "Upload for Review". Only structured findings are sent.

04
Get help if needed

Free: expert guidance. Pro: priority ~40-mile DMV Rapid Response dispatch when findings are serious.

Upload is always optional. QuickScan is identification only.

PRO ACCESS + ADMIN TRACKING

Create a Free Account or Login with Protection Plan for Full Pro QuickScan

  • HOME VISIT READY: all 8 hs-* Home/SMB Field Presets with rich field_scoping_summary + recommended_on_site_actions + home_visit_resolution decision matrix + Tier1 signals (WiFi mobility, scheduled tasks tampering, security software evasion, jump lists, PowerShell depth, video/RMM artifacts)
  • Signed Pro USB kits (explicitly Home Visit Ready — ship HOME_VISIT_CAPABILITY_AUDIT_2026-05.md + LICENSE_CRYPTO.md), license-key authenticated installers, Impact Timeline + fortified reports + one-click Promote to Case prefill
  • Full Pro Cyber Audit Trail: moduleTimings + %, sortable GUI Module Explorer (SLOW OUTLIER / HIGH IMPACT / PRESET-ASSOC hs-* flags, clickable columns), in-app diff, Timeline Correlation, one-click CSV/JSON exports + sidecars, CLI --export-audit --audit-diff — major differentiator for legal/insurance/audit/dispatch (see PRO_CYBER_AUDIT_QUICK_START.md)
  • Priority admin upload + ~40-mile DMV Rapid Response dispatch activation (core coverage radius) with full tracking, notes, case linking
  • License key enables direct case linking, priority queue, and examiner visibility in QuickScan Reports
Login / Member PortalExplore Protection Plans (include Pro QuickScan) →
Existing members: Log in or enter your license key in the Pro Client for signed downloads + instant priority dispatch activation.
Pro uploads go straight into our examiner console

Full context, consent records, and risk signals. HIGH findings can trigger ~40-mile on-site dispatch with tracking. Free uploads use the standard review queue.

See the Examiner Console →
THE REPORT YOU GET (FREE & PRO)
Everything saved locally first. Nothing leaves until you say so.
✓ Risk score + plain explanation
✓ Interactive timeline & findings log
✓ Filter by severity or module
✓ Self-contained HTML (print or open anywhere)
✓ Full JSON + checksums for records
✓ Auto-saved to your USB/drive
Pro adds: All 8 hs-* HOME VISIT READY presets + rich Field Scoping Summary + recommended_on_site_actions + home_visit_resolution decision matrix + Impact Timeline + one-click Promote to Case + full Pro Cyber Audit Trail (sortable Module Explorer with flags, in-app diff, Timeline Correlation, CSV/JSON exports + sidecars)
ANSWERS FOR EXAMINERS, TEAMS & HOME USERS

QuickScan FAQ

Searchable answers covering Free vs Pro, licensing, data handling & privacy, ~40-mile dispatch, lost licenses, safety, reports, and more. All content reflects current DMV Forensics QuickScan capabilities.

12 of 12 questions
Download QuickScan Free (Basic)Call 24/7: (202) 555-0199
QUICKSCAN IS TRIAGE-ONLY. IT DOES NOT CREATE FORENSIC IMAGES OR REMEDIATE. FULL CHAIN-OF-CUSTODY IMAGING REQUIRES OUR PROFESSIONALS.
RESPONSE TIME

Check your DMV Forensics service area

URGENCY ASSESSMENT

60-second incident readiness quiz

FREE INCIDENT READINESS ASSESSMENT

How urgent is your situation?

Answer a few honest questions. We’ll score the incident and recommend the right service tier + urgency.

QUESTION 1 OF 7

What best describes what happened?

Pick the closest match. This helps us prepare the right examiner.

Privacy, Consent & ~40-Mile Response

Everything runs locally first. Review the full interactive report before any upload. Rich bundles auto-save to USB. Only structured consented findings are ever sent. Pro accounts + license keys enable priority admin tracking and ~40-mile dispatch activation. Court work requires our professional write-blocked CoC imaging.

See: Privacy, QuickScan Consent, Disclaimer, Docs.

Already uploaded from the client? Use the public self-service status page for instant receipt confirmation (no login).Check report status → (Upload ID + email or consent reference)
Book Now