Pulse API & Downloads
iTechSmart Pulse is a lightweight endpoint security scanner for Linux, macOS, and Windows. It runs a set of read-only local security checks, assigns your machine a letter grade, reports the scan to the platform, and seals a ProofLink receipt so the result is independently verifiable on the public ledger.
Download endpoints
All downloads are served from app.itechsmart.dev (verified live, sizes as of 2026-07-01):
| Platform | URL | What you get |
|---|---|---|
| Any (universal installer) | https://app.itechsmart.dev/install.sh | Shell installer — detects OS, fetches and runs the right scanner (1.6 KB) |
| Linux | https://app.itechsmart.dev/download/pulse-linux | Bash installer/scanner with embedded fallback scanner (7.0 KB) |
| macOS | https://app.itechsmart.dev/download/pulse-mac | macOS .command installer (6.4 KB) |
| Windows | https://app.itechsmart.dev/download/pulse-windows | Windows executable (~8.9 MB) |
| Cross-platform scanner | https://app.itechsmart.dev/download/pulse-mac-script | The Python scanner itself (v1.1.1, ~11.5 KB) — what the Linux/macOS installers fetch and run |
One-line install (Linux / macOS / WSL)
curl -sSL https://app.itechsmart.dev/install.sh | bashThe installer detects your OS, downloads the cross-platform Python scanner to a temp file, runs it with python3, and deletes the temp file. On Windows it prints the download link for the .exe instead. Python 3 is the only dependency on Linux/macOS (the Linux script offers to install it via your package manager if missing).
What the scanner actually does
Pulse runs local, read-only checks — it does not modify your system, and the check commands are visible in the downloadable script. Per platform:
| Platform | Check | How |
|---|---|---|
| Linux | Firewall | ufw status (falls back to counting iptables -L rules) |
| Linux | Open ports | ss -tlnp — warns above 30 listening sockets |
| Linux | Pending updates | apt list --upgradable — warns at 5+ pending |
| Linux | File permissions | world-writable files in /etc — warns at 3+ |
| macOS | Gatekeeper | spctl --status |
| macOS | Application firewall | socketfilterfw --getglobalstate |
| macOS | FileVault disk encryption | fdesetup status |
| macOS | Software updates | softwareupdate -l |
Grading
The grade is the fraction of checks that pass:
| Pass rate | Grade |
|---|---|
| ≥ 90% | A |
| ≥ 75% | B |
| ≥ 60% | C |
| ≥ 40% | D |
| below 40% | F |
Reporting and the ProofLink receipt
After the checks, the scanner (1) sends a scan signal (hostname, OS, grade, pass counts) to the platform, and (2) seals the scan result as a ProofLink receipt. The receipt hash is printed at the end of the scan — a SHA-256 over the scan document — and can be checked on the public ledger. If the platform is unreachable, the scanner still computes and prints the local receipt hash so the result remains attestable.
# after a scan finishes, verify the receipt (also works in the browser)
curl https://verify.itechsmart.dev/api/verify/YOUR_RECEIPT_HASHWhat leaves your machine
The reported payload is the scan summary: hostname, OS string, grade, and per-check pass/warn results. The scanner does not read file contents, exfiltrate configuration, or install anything persistent — it runs once from a temp file and exits. Review the source before running, as you should with any curl | bash installer: the exact script is at https://app.itechsmart.dev/download/pulse-mac-script.
Is there a Pulse REST API?
Pulse itself is a client-side scanner, not a hosted API. Scan results land in the platform and on the ProofLink ledger; retrieve them via the ProofLink API (receipts of type security_scan/SECURITY_SCAN) or in the platform dashboard. Device enrollment and fleet scan-report endpoints exist on the gateway (/v1/devices/* — see Swagger) for managed deployments.