Everything installed
Windows registry, MSI and Store packages. macOS application bundles, Mac App Store receipts and Homebrew. Version, publisher, install date and size for each.
Laptop software audit
One scan lists every program installed on a laptop, works out which ones need a paid licence, finds cracked or tampered software, checks what is listening on the network, and lets you uninstall from the same window.
First time? The step-by-step guide walks through installing it, running a scan and reading the result.
Not sure which Mac you have? Open the Apple menu › About This Mac. A “Chip” line means Apple silicon; a “Processor” line means Intel.
The hosts file redirects Adobe's activation server to 127.0.0.1. This is the standard way a cracked install stops the software phoning home.
/etc/hosts line 14: 127.0.0.1 activate.adobe.com
→ Remove the line from the hosts file, then confirm Adobe is genuinely licensed.
Every finding carries the evidence that produced it, so nobody has to take the result on trust.
Windows registry, MSI and Store packages. macOS application bundles, Mac App Store receipts and Homebrew. Version, publisher, install date and size for each.
Windows and Office activation is read straight from the system, so that answer is definitive. Other paid software is flagged for review rather than accused — no vendor reports its licence state to the operating system.
KMS emulators, Adobe patchers, JetBrains licence agents, blackholed activation servers, and binaries whose signed bytes were modified after signing.
Every listening socket traced back to a process, an executable and a code signature. Flags miners, tunnels, remote-access tools and unsigned programs accepting connections.
Installed versions matched against the public CVE database and end-of-life dates. Optional — switch it off for a fully offline scan.
curl -fsSL https://troy.saffronbnb.com/install.sh | bashPicks the right build for your processor, checks it against the published SHA-256, installs it, and opens with no warning to click through.
Open the .dmg and drag Troy into Applications.
Right-click Troy and choose Open, then Open again. Double-clicking is refused the first time because the build carries no Apple developer certificate yet.
Seeing “Troy is damaged and can’t be opened”? That was a signing fault in build 1.0.0 — download again, 1.0.1 and later fix it.
Press Run the scan.
irm https://troy.saffronbnb.com/install.ps1 | iexRun it in PowerShell as administrator. Verifies the download, installs silently, and shows no SmartScreen warning.
Run the downloaded .exe and accept the administrator prompt. Reading activation state and running uninstallers both need it.
If a blue “Windows protected your PC” box appears, click More info then Run anyway.
Launch Troy and press Run the scan.
The one-command route avoids both warnings because they come from the mark a browser attaches to downloads, not from the app. It is also the quickest way to set up several laptops. Either way, the scan takes about half a minute, and nothing is changed or removed without you confirming it — every uninstall shows the exact command first, and system, driver and security components are blocked outright.
Troy reads local system state. That is all.
There are exactly two outbound requests it can make, and both are optional: looking up CVEs for installed versions, and uploading a report when you press the button. No telemetry, no analytics, no background reporting. Export to HTML, CSV or JSON and the file stays on the laptop until you send it somewhere.