Menoa is an antivirus designed specifically for Linux. It does what you want, when you want it to — just like all software should.
Download NowMenoa provides gui and cli frontends to ClamAV. Add custom malware signature feeds to extend its capabilities.
Monitors outgoing system connections against feeds of known malicious endpoints. Add your own custom feeds.
Beta-stage ML model classifies processes as malicious or benign based on characteristics like CPU usage and runtime. Not stable or trustworthy yet
Verifies system binary hashes against known-good checksums to detect tampering.
Explains in English what complex Bash scripts do, including install.sh scripts.
Full CLI access to all tools for automation and scripting
Minimal performance impact with customizable scheduling
Most antiviruses take control, telling you what you can do. Menoa is the opposite, only taking action when told to by you
Customize everything from the threat feeds to the app icon
A native GUI powered by QT6. No throwing Electron at the problem
It wouldn't be a Linux tool without a CLI
All data is stored in ~/.menoa/ in a readable format for manual edits and custom tools
Note: Menoa is meant to fill the gap of continuous scanning tools. It is not a vulnerability scanner. It does not address threat vectors like misconfigurations or .bashrc compromises. It complements tools like Lynis, rather than replacing them.
Installable through pip
curl -sL https://get.antivirus.sh | bash
