Free · For Windows · Built for the AI era
Blanktick. Your antivirus, built for AI.
AI assistants, AI apps and AI keys open new ways into your PC — ways a normal antivirus doesn’t look for. Blanktick finds them and explains each one in plain words. While it’s open, it warns you if an AI assistant is being made to run commands. And it tells you what it couldn’t check.
Download freeGet it for your PC What is “bad AI”?
- Free forever
- No account
- No ads
- Nothing uploaded
- Works with Windows Security
- AI hijacked to run commands
- Ransomware
- Password theft
- Hacker remote control
Why Blanktick
Bad AI doesn’t look like a virus.
An AI assistant on your PC can read web pages, emails and files. If one of them hides instructions for the AI, the assistant can be tricked into running commands as you. This is called prompt injection.
Other risks are simple settings: an AI app open to everyone on your network, or an AI key saved in plain text where any program can read it. None of these is a virus file, so a virus scan won’t flag them. Blanktick looks at how the AI on your PC is set up and what it’s doing.
And it’s honest: you see what it checked and what it couldn’t, each with a reason. No fake green ticks.
What it does
Good AI against bad AI — plus the usual threats
- Hijacked AI assistants
- Leaked AI keys
- Hidden instructions for AI
- Ransomware
- Harmful Office macros
- Password theft
- Hacker remote control
- Web shells (hidden back doors)
- Dangerous links
- Leaked passwords
-
Your AI, against bad AI
Optional: connect Claude Desktop, or another AI app that supports MCP connectors, and ask it what Blanktick found — risky AI assistants, open AI model servers, leaked AI keys — and how to close each gap. The connection is read-only: your AI can ask Blanktick questions, but it can’t change a single setting.
-
Live protection Preview
While Blanktick is open, it watches what programs do: an AI assistant being made to run commands, files suddenly being encrypted, a document launching a program, something trying to read your Windows sign-in passwords. It warns you straight away. It stops the program only if you turn that on.
-
Full PC check-up
75 checks on the Windows settings attackers change once they’re in: programs that start by themselves, remote access, the security certificates your PC trusts, the firewall and more.
-
Whole-PC virus scan New
Every file on every drive, USB sticks included, scanned by the Microsoft Defender engine already built into Windows, using the virus definitions Windows keeps updated. No second antivirus to slow you down. It reports what it finds; it doesn’t delete or move anything.
-
Link checker
Paste a link before you click it. It’s checked against about 72,000 known malware and phishing sites, right on your PC. The link isn’t sent anywhere.
-
Password checker
Find out if a password is one of the million most common or leaked ones. It never leaves your computer.
What it checks
Everything Blanktick looks at on your PC
-
Bad AI
- AI assistants that a web page, email or file could trick into acting as you
- Which tools an AI assistant is allowed to use on your PC
- AI tools that download and run code from the internet
- AI keys saved in plain text
- AI model servers open to your whole network
- Windows Recall keeping a picture record of your screen
-
Every file
- Every file on every drive, scanned by Microsoft Defender
- USB sticks and other plugged-in drives
- Programs that start with Windows, checked one by one
- Programs running from your personal folders
- Programs pretending to be Windows system files
- Drivers with known security holes (2,300+ known bad ones)
-
Your protection
- Antivirus running, up to date, and fully switched on
- Antivirus that other software can’t switch off
- Ransomware protection on your folders
- Firewall on
- Downloads checked before they run, and Smart App Control
- Office not running macros it should block
-
Passwords & accounts
- Every account needs a password; guest account off
- Your everyday account isn’t an administrator
- Screen locks quickly and asks for your password
- Repeated password guessing locks the account
- Sign-in passwords not left in memory or the registry
- Drive encryption, and Credential Guard (extra protection for sign-in passwords)
-
Hackers getting in
- Remote-control and remote-admin services
- Anything listening to your whole network
- File and printer sharing, and old, unsafe network protocols
- Fake security certificates your PC trusts
- Proxy, DNS and VPN settings that reroute your traffic
- Unencrypted or swapped Wi-Fi
-
Windows itself
- Security updates installed and switched on
- Windows version still supported
- Software past its security support
- Secure Boot, the security chip (TPM) and memory integrity
- Exploit protections not switched off
- Browser extensions from official stores, and what they can read
92 checks in all, 75 of them on Windows. Anything Blanktick can’t check on your PC is listed as not checked, never as a pass. See every check →
Getting started
Up and running in 3 steps
Get it
Free from the Microsoft Store. No sign-up, no card.
Install
Installs just for you. No admin password needed.
Run your check-up
See what’s fine, what needs fixing and what it couldn’t check. Switch on Live protection if you want warnings while the app is open.
Works with Windows Security
Windows Security is good at viruses. It won’t tell you that an AI assistant can be steered by a web page, that your AI keys sit in plain text, or that Remote Desktop is on. Blanktick looks at that gap. Keep Windows Security on and use both.
Private by design
Everything runs on your PC. Nothing is uploaded, there’s no account, and Blanktick never changes a setting without you.
Open for anyone to check
Blanktick is open source, so anyone can read the code. The Microsoft Store version is signed by Microsoft.
FAQ
Common questions
Is Blanktick really free?
Yes. No ads, no account, no trial, and no paid version holding back the useful parts. It’s open source.
What do you mean by “bad AI”?
AI that ends up working against you on your own PC: an AI assistant that a web page or email can talk into running commands (this is called prompt injection), AI tools that download and run code, AI model servers anyone on your network can use, and AI keys saved where any program can read them. Blanktick finds these and explains each one. It flags them; it doesn’t delete anything, and it can’t catch every possible attack.
I don’t use AI. Is Blanktick still useful?
Yes. The check-up looks at 75 Windows settings attackers like to change, the whole-PC scan checks every file, and the link and password checkers work on their own.
Do I have to connect my own AI to it?
No. Blanktick works on its own: run the check-up and read the results in the app. Connecting an AI app is optional. Blanktick uses MCP, a standard way for AI apps such as Claude Desktop to talk to other programs. The connection is read-only: your AI can ask Blanktick what it found, but it can’t change anything.
Is it an antivirus? Do I still need Windows Security?
Blanktick is an antivirus built for AI: it looks after the AI on your PC. Live protection flags attacks by what they do, and the check-up finds risky settings. To scan files for viruses — including every file on your PC with Scan whole PC — it uses the engine already built into Windows (Microsoft Defender), so keep Windows Security switched on.
Does Live protection run all the time?
No, only while Blanktick is open. It’s a preview feature: it warns you by default, and stops a flagged program only if you turn that on. Run Blanktick as administrator to let it see the whole PC.
Does it send my data anywhere?
No. Blanktick makes no internet connection. When it asks Defender to scan a file, Defender may contact Microsoft depending on your own Windows settings.
Why does Windows warn me when I install it?
The easiest fix: get Blanktick from the Microsoft Store. Microsoft signs that version, so there’s no warning. The .msi and .zip aren’t code-signed yet, so Windows shows “Windows protected your PC”. Click More info then Run anyway, and check the download is genuine with the fingerprint in the download section.
Mac, iPhone or Android?
Windows only for now. An Android version exists for people who build it themselves; it isn’t on Google Play.
Where are the technical details?
Everything — all 92 checks, how the offline promise is enforced, and how to build it yourself — is on the full details page.
Download Blanktick free
Version 0.1.3 · Windows, 64-bit · Free
No account. Nothing uploaded. Open source. Works alongside Windows Security.
You’re on a phone
Blanktick runs on Windows PCs. Send yourself the link and open it on your computer.
Prefer not to install? Get the portable .zip
(extract it first, then run Blanktick.exe).
Use Claude Desktop? Get the Claude Desktop extension (.mcpb) and double-click it to connect your AI agent to Blanktick. Read-only: it can ask, never change.
The Microsoft Store version is signed by Microsoft. The .msi and .zip aren’t code-signed yet, so Windows will say “Windows protected your PC”; choose More info → Run anyway.
Check your download is genuine
In PowerShell, run Get-FileHash .\Blanktick-0.1.3-win-x64.msi. It should print:
34E8C03390D60FA007C56B4C8ED84483D2851E2D98099407BE57E7A1D2CFDF70
For the .zip: 6EBF28C4451C90F1A3796DAFEA6CFAAC68DDF778373BBE142E58A5B9166FF07B
For the .mcpb: 16F85C4888D3E1FDB62CEC0B287BDBCC784E015C8167B9C7F3849BDD42ED39F8