Windowswarned you.You check.
The SmartScreen warning deserves a pause. Understand what it means, check the file and decide with information before installing HarnessUp.
Your file stays on your machine.
Windows protected your PC
Microsoft Defender SmartScreen prevented an unrecognized app from starting.
Recognition ≠ integrity checkEvery file has its own fingerprint.
SHA-256 is a 64-character code. It lets you compare the downloaded file with the file published for the same version. The source of the reference code also has to be trustworthy.
The official hashes have not been provided for this page yet. Ask support for the SHA-256 of your version before using the checker to validate a download.
| Distribution file | Official SHA-256 | Check |
|---|---|---|
HarnessUp-Setup-x64.exeWindows x64 installer, per user. | Not provided | Request the .exe hash ↗ |
HarnessUp-x64.zipProgram package for Windows x64. | Not provided | Request the .zip hash ↗ |
install.ps1PowerShell install script. | Not provided | Request the script hash ↗ |
Publishing note: the names of the .exe and .zip packages are provisional. The values must be published from the real artifacts of each version; a sample code is no good for checking integrity.
Your file.
Your check.
Choose the file you downloaded. The browser calculates the SHA-256 right here, without sending the content. Paste the official hash for the same version to compare.
Get-FileHash .\HarnessUp-Setup-x64.exe -Algorithm SHA256
Run it in the download folder. Change the name if the file is different. Compare the Hash field with the official SHA-256 for the same version.
From the warning
to the decision.
No shortcuts.
SmartScreen weighs reputation signals to evaluate apps. A little-known app can trigger a warning, but this screen alone does not determine whether the file is safe.
SHA-256 checks integrity. Defender's analysis and trust in the source remain part of the decision.
Check before you open.
Verify where the download came from and compare the hash with an official reference for the same version. Without a trusted reference, ask support for help.
Read "More info".
If the warning is about an unrecognized app, this option may show more details. Check the file name and the publisher shown.
Continue only after checking.
If you trust the source, the hash matches and there is no threat detection, "Run anyway" may be available. On managed machines, the organization's policy may block running the file.
Different hash, threat detection or doubtful source? Don't run it. Keep the protections on and send the details to help@harnessup.dev.
Prefer installing
from the terminal?
npm is the main channel. If you already use Node.js, one line installs HarnessUp without opening the .exe installer.
See all installation methods ↗npm install -g harnessupNeeds Node.js with npm installed. The measurement layer is free and works without login.
HarnessUp runs the official claude and codex with your account and never reads or stores your token or your key.
You can check.
You can ask.
Does this warning mean there's a virus?
A warning about an unrecognized app is not the same as a threat detection. Read the full message. If Defender identifies a threat, don't go ahead with the installation.
Does a matching hash mean the file is safe?
It means the calculated hash matches the reference. That helps verify integrity, as long as the reference is trustworthy. It does not replace a security analysis.
Does the checker send my file to you?
No. The content is read by the browser to calculate the SHA-256 with the local crypto API. This checker does not upload the file or the hash.
Why did the SHA-256 change after an update?
The code depends on the entire content of the file. A new version usually has a different hash. Always compare the same file, from the same version and the same architecture.
Do I need to turn off my antivirus or have administrator access?
Keep your antivirus on. The HarnessUp installer for Windows is per user and does not require administrator access. If the behavior doesn't match that, stop and contact support.