TrackerRadar is an early local alpha and is not a replacement for antivirus, EDR or professional incident response.

Official publisher: SC LABS

• The main interface runs without persistent administrator rights.
• No control action is executed automatically.
• Firewall and protected startup actions require explicit confirmation and a visible Windows UAC prompt.
• The control helper accepts local request files only and does not open a network port.
• Supported control actions write rollback information to the local Change Vault before modifying Windows.
• The Activities control reads the exact TrackerRadar firewall-rule state before offering block or restore.
• Restore is offered only when the exact TrackerRadar rule and its matching applied Change Vault record both exist.
• A rule without a matching safe rollback record is not removed automatically.
• The current alpha only supports outbound firewall blocking and selected startup disable/undo operations.

• TrackerRadar contains three fixed SC LABS HTTPS destinations: the main website plus the MalwareRadar and PrivacyRadar product pages.
• Links open in the user's default browser only after an explicit click.
• TrackerRadar does not embed a browser, execute downloaded content or contact those pages in the background.

• The scan starts only after an explicit user action and visible UAC approval.
• It uses a uniquely named, short-lived Windows ETW trace session.
• It does not install a driver, service or permanent background monitor.
• Temporary ETL and CSV files are removed in a finally cleanup path.
• The result does not store document contents or individual file names.
• Event labels describe observed Windows events and must not be interpreted as proof that data was copied, uploaded or used maliciously.

Use GitHub Private Vulnerability Reporting in the public repository for security reports. Do not publish exploit details, personal scan data or machine-specific paths in a public issue.

If private reporting is not yet available, open a minimal issue requesting a private contact channel without disclosing technical exploit details.

Only the newest tagged alpha is evaluated. Older development snapshots are unsupported.