← NetGuardian

CLIENT (YOUR MACHINE)

This is a desktop/web app you run locally, not a page on this Worker. Scanning from the NetGuardian site is disabled. After you start it, the UI is on your computer — usually http://localhost:8888 (Chrome) or a macOS window. Triage stays on this site.

Needs Flutter on PATH.

git clone https://gitlab.com/owasp-blt/blt-netguardian.git
cd blt-netguardian/client
flutter pub get

# See the GUI in Chrome (this machine only):
flutter run -d chrome --web-port=8888
# then open http://localhost:8888

# Real device-side scan (no browser CORS): macOS / Windows / Linux desktop
flutter run -d macos

Production orgs: the site owner registers with BLT / NetGuardian and issues HMAC + payload + triage keys to researchers. The client alone is not enough without those org keys. Docs: README · docs/spec.

In the app, set API base URL to https://netguardian.owaspblt.org (or your staging Worker) and paste the keys your org issued. Staging demos may use shared org-demo keys. Chrome on localhost needs that origin listed in CORS_ALLOWED_ORIGINS. For a fully offline demo, run python3 local_dev/serve.py and set the base URL to http://127.0.0.1:8787.

Source: client/ · zip of repo

Headless alternative (not the GUI): curl -fsSL https://netguardian.owaspblt.org/install.sh | sh -s -- https://example.com