Automic VaultAutomic Vault

brew

Install checksec with Homebrew, apt, dnf, Nix, pacman, zypper

Security feature auditing for ELF binaries and Linux kernels. Version 3.2.0 via Homebrew; verified 2026-07-21. Also installable with debian: sudo apt install checksec.

Install commandSecurity notes

install

Additional install commands

macOS

Homebrewverified · 100%
brew install checksec

local Homebrew formula metadata

Linux

Debian aptverified · 92%
sudo apt install checksec

Debian stable package indexes · checksec · source: deb.debian.org

Fedora dnfverified · 92%
sudo dnf install checksec

Fedora Rawhide package metadata · checksec · source: dl.fedoraproject.org

Nixverified · 92%
nix profile install nixpkgs#checksec

nixpkgs package indexes · pkgs/by-name/ch/checksec/package.nix · source: api.github.com

Arch Linux pacmanverified · 92%
sudo pacman -S checksec

Arch Linux sync databases · checksec · source: geo.mirror.pkgbuild.com

openSUSE zypperverified · 92%
sudo zypper install checksec

openSUSE Tumbleweed package metadata · checksec · source: download.opensuse.org

overview

Package summary

Security feature auditing for ELF binaries and Linux kernels

Commands and aliases

  • checksec

history

Project history and usage

checksec is a command-line auditor for security properties of ELF executables, running processes, and Linux kernels. It reports mitigations and hardening features such as RELRO, stack canaries, NX, PIE, CFI, FORTIFY_SOURCE, and seccomp.

Project history

The original checksec was written by Tobias Klein as a Bash script in 2011. The maintained project is a modern Go rewrite distributed as a single static binary while retaining the familiar checksec purpose and name.

Adoption history

The project is distributed through release binaries, Linux package formats, a container image, Go installation, and several operating-system package managers, making it a common lightweight hardening check in developer and security workflows.

How it is used

Typical commands inspect one file, recursively scan a directory, audit a process by PID, or examine the running Linux kernel. Machine-readable CSV, JSON, XML, and YAML output makes it suitable for scripts and CI policy checks.

Why package nerds care

checksec packages a broad set of binary-hardening checks into one small CLI. It is useful after compilation or packaging to verify that toolchain and linker hardening flags survived into the shipped artifact.

Timeline

  • 2011: Tobias Klein wrote the original Bash implementation.
  • 2014: The current official GitHub repository was created.
  • 2026: The Go-based 3.x series was distributed as static binaries, native packages, containers, and source builds.

Related projects

  • The project is closely associated with ELF tooling, Linux kernel hardening, compiler and linker mitigations, and CI systems that consume its structured reports.

security posture

No protected-tool coverage found yet

No matching local secret-handling manifest was found for checksec. Nucleus package metadata is still published here so future coverage has a stable package URL.

Install behavior

  • No Homebrew post-install hook is recorded in formula metadata.
  • Homebrew bottle metadata is available for 6 platform targets.
  • Build metadata lists 1 build dependencies.

Recommended review

Before unattended agent use, check whether the tool reads plaintext credentials, writes remote state, publishes artifacts, or shells out to plugins.

executables

Installed executables

CommandKindExposureNote
checkseccliglobal executable

freshness

Version and freshness

These signals separate page generation age, package-manager activity, and upstream release comparison. Version lag is warned only when an evidence URL and comparable versions are present.

page generated2026-07-25
manager version3.2.0
manager updated2026-07-21
local dataok
upstreamcurrent
latest detected3.2.0

https://github.com/slimm609/checksec

  • okNo freshness warnings were generated.

install metadata

Package metadata

Package keybrew:checksec
Version3.2.0
Package managerHomebrew
Package manager pagehttps://formulae.brew.sh/formula/checksec
Homepagehttps://slimm609.github.io/checksec
Repositoryhttps://github.com/slimm609/checksec
Upstream docshttps://slimm609.github.io/checksec
LicenseBSD-3-Clause
Source archivehttps://github.com/slimm609/checksec/archive/refs/tags/3.2.0.tar.gz
Last updated2026-07-21T03:05:04Z
Pulsenew
Build dependenciesgo
Bottleavailable (on arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, sonoma, x86_64_linux)
Homebrew post-installnot defined
Servicenone declared

registry facts

Source database details

Source DatabaseHomebrew formula API
Taphomebrew/core
Full Namechecksec
Version Scheme0
Revision0
Bottle Stable Root URLhttps://ghcr.io/v2/homebrew/core
Deprecatedno
Disabledno
Keg Onlyno
URL Keys
  • stable

source database matches

Other package-manager records

Matches are pulled from external package-manager indexes and kept separate from local Automic Vault package links.

Debian apt95%

checksec 2.6.0-2

Bash script to test executable properties

https://github.com/slimm609/checksec.sh

sudo apt install checksec
  • Section: misc
  • Architecture: all
  • 5 dependencies
  • 2 optional deps
  • normalized package name match
  • Matched by: Checksec
Debian stable package indexes · deb.debian.org · Debian stable package indexes: checksec from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz
Nix95%

checksec

nix profile install nixpkgs#checksec
  • normalized package name match
  • Matched by: Checksec
nixpkgs package indexes · api.github.com · nixpkgs package indexes: pkgs/by-name/ch/checksec/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1
Ubuntu apt95%

checksec 2.6.0-2

Bash script to test executable properties

https://github.com/slimm609/checksec.sh

sudo apt install checksec
  • Section: universe/misc
  • Architecture: all
  • 5 dependencies
  • 2 optional deps
  • normalized package name match
  • Matched by: Checksec
Ubuntu 24.04 LTS package indexes · archive.ubuntu.com · Ubuntu 24.04 LTS package indexes: checksec from https://archive.ubuntu.com/ubuntu/dists/noble/universe/binary-amd64/Packages.gz
dnf95%

checksec 2.7.1-7.fc44

Tool to check system for binary-hardening

https://github.com/slimm609/checksec.sh

sudo dnf install checksec
  • License: LicenseRef-Callaway-BSD
  • Category: Unspecified
  • Architecture: noarch
  • Source Package: checksec
  • 7 dependencies
  • 1 provides
  • normalized package name match
  • Matched by: Checksec
Fedora Rawhide package metadata · dl.fedoraproject.org · Fedora Rawhide package metadata: checksec from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/e5ca8ce900cd68f5419e1c39ae517343100b306336cbaeb70a3c153121d95094-primary.xml.zst
pacman95%

checksec 3.1.0-2

Tool designed to test which standard Linux OS and PaX security features are being used

https://slimm609.github.io/checksec/

sudo pacman -S checksec
  • License: BSD-3-Clause
  • Architecture: any
  • 1 dependencies
  • normalized package name match
  • Matched by: Checksec
Arch Linux sync databases · geo.mirror.pkgbuild.com · Arch Linux sync databases: checksec from https://geo.mirror.pkgbuild.com/extra/os/x86_64/extra.db.tar.gz
zypper95%

checksec 3.1.0-2.3

Utility to check binaries for system hardening

https://github.com/slimm609/checksec.sh

sudo zypper install checksec
  • License: BSD-3-Clause
  • Category: Unspecified
  • Architecture: x86_64
  • Source Package: checksec
  • 1 dependencies
  • 1 provides
  • normalized package name match
  • Matched by: Checksec
openSUSE Tumbleweed package metadata · download.opensuse.org · openSUSE Tumbleweed package metadata: checksec from https://download.opensuse.org/tumbleweed/repo/oss/repodata/be8d3611d25469107f32075a1697e69ec57a2b850b42348a658cc671ad5ec2b50760d02c3e59524d50da9a11d5be799bdaffba2e166e8ca8858512e3c0bd665d-primary.xml.zst

package graph

Links come from deterministic package relationships, av.db category and tag curation, ecosystem matches, and package hub membership.

Related tools

  • goBuild dependency declared by Homebrew.

Same workflow

  • execstackShares av.db curated category or tags: binary-analysis, cli, elf, security.
  • redressShares av.db curated category or tags: binary-analysis, cli, security.
  • banditShares av.db curated category or tags: cli, security, static-analysis.
  • caracalShares av.db curated category or tags: cli, security, static-analysis.
  • cargo-geigerShares av.db curated category or tags: cli, security, static-analysis.
  • cfripperShares av.db curated category or tags: cli, security, static-analysis.

source trail

Generated from repository data

This page is generated by av-web from the private package SQLite artifact built by scripts/generate-pkg-sqlite.py.

Used sources

  • Nucleus package database
  • av.db category and tag curation
  • cross-ecosystem install command graph
  • curated package history
  • external package-manager database matches
  • package relationship graph
  • package version freshness
  • package-page enrichment