# Checksec

Checksec is a Vulnerability Assessment product. It runs on-premises. Pricing is free.

A bash script that analyzes executable files to check security properties like PIE, RELRO, canaries, ASLR, and Fortify Source protections.

Checked October 2026.

## What is Checksec?

Checksec is a bash script designed to analyze executable files and assess their security properties and hardening features.

The tool examines various security mechanisms implemented in binaries, including:
- Position Independent Executable (PIE) support
- Relocation Read-Only (RELRO) protection
- Stack canaries for buffer overflow protection
- Address Space Layout Randomization (ASLR) compatibility
- Fortify Source compilation flags

The script provides modular functionality with configurable output formats, including CLI and JSON options. Recent updates have enhanced the tool's capabilities to include Clang Control Flow Integrity (CFI) and safe stack checks through an extended analysis mode.

Checksec operates through command-line interface with getopts-based option parsing, allowing flexible parameter ordering. The tool includes cryptographic verification features using both Cosign and OpenSSL signature validation to ensure integrity.

Originally developed by Tobias Klein, the tool focuses specifically on Linux executables and does not support macOS Mach-O binaries or OSX kernel analysis. The script serves as a security assessment utility for developers and security professionals evaluating binary hardening implementations.

Tags: Security Hardening, Linux, Binary Analysis, Executable Analysis

## Where it fits in your security program (NIST CSF 2.0)

- [Identify](https://cybersectools.com/guides/building-identify-program-small-team): helps you know your assets and your risks.
- [Protect](https://cybersectools.com/guides/building-protect-program-small-team): helps you prevent attacks and keep data safe.

## Quick facts

- Category: [Exposure & Vulnerability Management](https://cybersectools.com/categories/exposure-vulnerability-management) · [Vulnerability Assessment](https://cybersectools.com/categories/vulnerability-assessment)
- Deployment: On-Premises
- Company size fit: Startup, SMB, Mid-Market, Enterprise
- Pricing model: Free
- GitHub stars: 2,204
- Website: github.com

## Checksec FAQ

### What is Checksec?

Checksec is a product in the Vulnerability Assessment category. It covers Security Hardening, Linux and Binary Analysis.

### What is the pricing for Checksec?

Checksec is free. Download and setup instructions are at https://github.com/slimm609/checksec.

### What are alternatives to Checksec?

Alternatives to Checksec listed on CybersecTools:

1. [Fortra VM](https://cybersectools.com/tools/fortra-vm) - Risk-based vulnerability management platform for scanning and prioritization (Commercial)
2. [Lyrie Remedy — AI Auto-Fix for Vulnerabilities](https://cybersectools.com/tools/lyrie-remedy-ai-auto-fix-for-vulnerabilities) - AI agent that auto-detects, patches & verifies server vulns with credit refund on failure. (Commercial)
3. [SecHard Cyber Hygiene Platform](https://cybersectools.com/tools/sechard-cyber-hygiene-platform) - Unified cyber hygiene platform for hardening, PAM, asset mgmt & vuln assessment (Commercial)
4. [Glitchward Lightweight Agent-Based Monitoring](https://cybersectools.com/tools/glitchward) - Agent-based server security monitoring with vulnerability and compliance scanning (Commercial)
5. [Action1 Windows Patch Management](https://cybersectools.com/tools/action1-windows-patch-management) - Cloud-based patch management for Windows, macOS, and Linux endpoints (Commercial)

Compare all Checksec alternatives at [https://cybersectools.com/alternatives/checksec](https://cybersectools.com/alternatives/checksec)

### What deployment and organization size does Checksec fit?

Checksec is available as on-premises software. It is listed for startups, small businesses, mid-market companies and enterprises. It is free.

## Compare Checksec with similar solutions

- [Checksec vs Fortra VM](https://cybersectools.com/compare/checksec-vs-fortra-vm)
- [Checksec vs Lyrie Remedy — AI Auto-Fix for Vulnerabilities](https://cybersectools.com/compare/checksec-vs-lyrie-remedy-ai-auto-fix-for-vulnerabilities)
- [Checksec vs SecHard Cyber Hygiene Platform](https://cybersectools.com/compare/checksec-vs-sechard-cyber-hygiene-platform)

All alternatives to Checksec: [/alternatives/checksec](https://cybersectools.com/alternatives/checksec)

---

Source: https://cybersectools.com/tools/checksec

For AI agents: every CybersecTools shortlist is listed at https://cybersectools.com/shortlists.md, and any compare page has a Markdown copy too (add .md to its URL).

More on Checksec: funding, momentum, hiring and news, plus the full product and company record, are available through the Mandos MCP Server (paid plans), which connects to AI assistants: https://mandos.io/mcp?utm_source=cybersectools.com&utm_medium=product-md