CapLOCKS Security Suite (Alpha)

PLATFORM
Windows 10 / 11. Needs Node.js LTS + Python 3 on PATH.
Source zip with .bat launchers — not a frozen exe this debut.

WHAT IT IS
CapLOCKS Security Suite is the hub window for the CapLOCKS checks. You search the catalog on the left, pick a check, fill a small config popup if it needs an input, hit Run once, and watch the output stream into the run log. Four tabs per check: Overview, Run, Docs, Schedule.

I built this because the checks already worked as one-shot .bat files and I was tired of hunting the right bat. Now they live in one window that tells you what each check actually does before you run it. The bats still ship next to the UI if you prefer them.

22 checks are wired right now. The catalog lists 58 — the rest are research entries I have not wired yet, and the Docs tab says so instead of pretending.

WHAT IT DOES

• Email breach lookup (XposedOrNot) and password lookup (Have I Been Pwned k-anonymity — a 5-char hash prefix goes out, the password never does)
• Local file hash, SHA-256 + SHA-1 — the file is not uploaded anywhere
• Hash / IOC lookups: CIRCL hashlookup, VirusTotal, MalwareBazaar, ThreatFox, URLhaus
• Vulnerability and phishing feeds: CISA KEV, NVD by CVE, OpenPhish
• Domain and TLS: RDAP, crt.sh certificate transparency, SSL Labs (cached), MDN HTTP Observatory
• Local Windows posture, read-only: firewall profiles, BitLocker volumes, Defender MpCmdRun, admin / RDP / SMB
• Masked secret fields, an optional session vault for API keys, and a daily append log written on your PC

HONEST LIMITS

• It detects and notifies. It does not erase you from the dark web, brokers, or breach dumps — nothing does, whatever the ads say
• Not antivirus. Not a whole-disk scanner. It only looks where you point it
• Free / public APIs miss things. A clean result is not a guarantee you are clean
• VirusTotal without VT_API_KEY just opens the public page — API stats stay off
• MalwareBazaar / URLhaus / ThreatFox need your own abuse.ch Auth-Key. This zip ships without keys, and yours stay in your local .env
• BitLocker and firewall reads want an Admin run for the full list. Recovery keys are never printed
• Early access v0.1 — source zip, not a signed installer, and the check catalog is still growing

Mental model: a dashboard and a set of honest one-shots, not a bodyguard.

Part of the CapLOCKS Security lane next to Guardian (headless email watchdog), Overseer (dependency scans), Vault (encrypted packs), and Security Snip (OCR redaction). This is the hub they hang off. It is not Guardian — separate download, separate page.

INSTALL

1. Download CapLOCKS-Security-Suite-V0.1-windows.zip and Extract All into a folder you keep.
2. Install Node.js LTS and Python 3 if they are not on PATH already.
3. One time: run FIRST-RUN.bat.
4. Day to day: double-click CapLOCKS_Security_Suite_run.bat (or Suite-UI.bat). It verifies Node / Python, installs deps, opens the window.
5. SmartScreen? More info → Run anyway (unsigned indie build).

Zip does not include node_modules, .env, your backend\data, study material, or my research notes. Results and logs are created on your machine when you run something.

---

LINKS
itch profile: https://capscrewunlimited.itch.io
Discord: https://discord.gg/nZnexhgSne
tips: https://buymeacoffee.com/capcap

Patreon: https://www.patreon.com/cw/CapsCrewUnlimited


LICENSE
CapCrew proprietary — personal use. Licensed, not public domain. Please don’t re-distribute; these apps take me a lot of work even if I don’t code every piece myself.
See LICENSE.txt in the zip.