MyVaultMate 2.0: nothing to install

The question we heard most from small offices was not about detection or reports. It was about setup: who has to install this, on which computers, with what permissions? MyVaultMate 2.0 answers it by removing the install. You download one file, run it, and sign in with your account. That is the whole setup.

What changed

Before, adding a computer meant an installer, an administrator account, and a long token to copy from one screen to another. Now the dashboard has a single Add a computer page with a download button for each system. You run the file on the computer you want scanned and sign in with the same email, password and authenticator code you use on the website. The computer appears under Computers within seconds. For an IT provider setting up machines without your password, the same page shows a 6-character pairing code that works once and expires after 15 minutes.

There is no license key to track and no token to guard. Your plan sets how many computers and locations you can cover, and adding a computer checks that allowance for you.

What you actually download

One file per system. On Windows 10 and 11 it opens a window. On Linux it opens a menu in your terminal, and every menu item is also a command-line flag, so an IT provider can script a whole office. Windows Server is not supported.

The file does not write next to itself. When it starts watching (as soon as you sign in), it copies itself to a fixed place in your user folder, keeps a small background process running, and sets that process to start again after a restart. Everything it creates lives in one documented folder, and running it with --where prints every path.

Staying in control

• Stop watching reverses it: the background process stops and the automatic start is removed. Delete the file and nothing is left.
• Unpair makes the computer forget its connection. You can also do this from its page under Computers.
• Scan now on the Computers page asks a computer to scan, and the dashboard shows the result when it comes back.
• Updates are never applied by themselves. When a new version is out, press Update now in the window (on Linux, the menu option or --update); the new file is checked against its published fingerprint first. Versions before 2.3.4 have no such button: download the new file once from Add a computer.

What did not change

In 2.0 itself, the detection rules, the scoring, the plans and the report stayed the same. (Later versions added checks and changed the score; How it works always shows today's.) File contents and full values still never leave the computer: the dashboard receives details about the computer and, for each finding, the file path, the type of data, the severity, the frameworks involved and a masked sample (the full list is on the Security page). The scan emails are unchanged too.

The Windows file is not code-signed yet, so Windows may show a SmartScreen warning the first time you run it. Choose "More info", then "Run anyway", and only for a file you downloaded from cmtechsoftware.io. Each download shows its SHA-256 so you can check it.

Where to start

Sign in, open Add a computer, and try it on the busiest machine in the office. The setup help covers file servers, running as a service and troubleshooting, and how it works describes exactly what runs and what is sent. If you do not have an account yet, you can start a trial at /trial/ (a card is required and is not charged during the trial).