First run
These builds are not signed with a paid Apple or Microsoft certificate, so
both systems stop you the first time. Neither message is a finding about
this file — every installer's SHA-256 is under Checksums.
macOS — you will be told the app is "damaged". It is not. macOS shows
that exact wording for any app it cannot trace to a paid Apple Developer ID,
and the dialog's only obvious button moves it to the Trash. Do not use it.
On macOS 15 (Sequoia) and later there is no right-click → Open bypass; Apple
removed it. Drag the app to Applications, then either open
System Settings → Privacy & Security and click Open Anyway, or run:
/usr/bin/xattr -dr com.apple.quarantine /Applications/OpsMaxx.appThat clears the download flag and nothing else — the app's signature stays
intact and verifiable with codesign --verify --strict --deep. The full
path is deliberate: a Homebrew or pip xattr earlier on your PATH may not
support -r.
Windows — SmartScreen will warn. Choose More info → Run anyway.
Downloads
Windows
| File | Notes |
|---|---|
OpsMaxx-0.35.18-setup.exe
| Installer with desktop and Start-menu shortcuts. Pick this one if unsure. |
OpsMaxx-0.35.18-portable.exe
| Single file, no install, keeps its data beside the .exe — runs from a USB stick
|
macOS
| File | Notes |
|---|---|
OpsMaxx-0.35.18-arm64.dmg
| Apple Silicon (M1 and later) |
OpsMaxx-0.35.18-x64.dmg
| Intel Macs |
Linux
| File | Notes |
|---|---|
OpsMaxx-0.35.18-x86_64.AppImage
| Any distribution — chmod +x and run
|
OpsMaxx-0.35.18-amd64.deb
| Debian and Ubuntu — sudo apt install ./OpsMaxx-0.35.18-amd64.deb
|
Source for the bundled OpenVPN
OpsMaxx bundles OpenVPN on macOS and Linux. OpenVPN is GPL-2.0, so the
corresponding source for the exact build in these installers is published
here as openvpn-2.6.22-source.tar.gz — the pinned upstream commit,
unmodified, with its SHA-256 in the table below. scripts/build-openvpn.sh
in this repository is the recipe that turns it into the shipped binary.
Antivirus scan
These builds are unsigned, so every release is scanned before publishing.
| Scanner | Result |
|---|---|
| Microsoft Defender (Windows runner) | no threats found |
ClamAV ClamAV 1.5.3/28119/Thu Sep 10 06:24:09 2026
| clean |
| VirusTotal (70+ engines) | per-file reports below |
OpsMaxx-0.35.18-setup.exeOpsMaxx-0.35.18-portable.exeOpsMaxx-0.35.18-x64.dmgOpsMaxx-0.35.18-arm64.dmgOpsMaxx-0.35.18-x86_64.AppImageOpsMaxx-0.35.18-amd64.deb
One or two detections from minor engines are normal for an unsigned
Electron installer. Verify the SHA-256 of what you downloaded against
the value listed below, or build from source.
Checksums
These are the whole reason an unsigned build is still safe to trust: they
prove the file you have is the file this workflow built. Check yours before
running it.
shasum -a 256 <file> # macOS, Linux
certutil -hashfile <file> SHA256 # Windows| File | SHA-256 |
|---|---|
OpsMaxx-0.35.18-amd64.deb
| f42302e05b73aa8a535479e6af653c4335542f346d268f4281d9da53b5b7e6f3
|
OpsMaxx-0.35.18-arm64.dmg
| b93e3268d5a5c02a55f3804cf76827967560bf7b4c57125c8c9242b3cb989e0d
|
OpsMaxx-0.35.18-portable.exe
| b56aac18f068a019babb1f30d43c924400afb8c7d7d707d3d0d93e56c2333134
|
OpsMaxx-0.35.18-setup.exe
| e989c4e7aafd0e4e332f4a3b5d03ba9fb978725ce00c427dbddbd07e70638697
|
OpsMaxx-0.35.18-x64.dmg
| 71a3ad6a7d329c770ea47e6b59fe51b530ab57f174ce79cddbba618e569bed9f
|
OpsMaxx-0.35.18-x86_64.AppImage
| de694fa8b246c8e6c9e1b23f3a43bace3452e30c2c439bdd629a944fb79c8bf0
|
openvpn-2.6.22-source.tar.gz
| e0eac30be2308340564507f056a0090e467c5e78ac80d64a6604cbfbe1a8aa48
|
The .blockmap files are build metadata, not downloads — they describe
binary deltas between versions and are only read by an updater. The source
archives are a snapshot of the repository, not a build.
Full Changelog: v0.35.17...v0.35.18