Download the CipherMap CLI. Inspect Your First Local Report.
Download a native CLI and a small repository with known cryptographic findings. Run Free scan, preflight, and demo out of the box with explicit offline controls, then unlock Tier A CBOM exports via the 7-day Pro Trial or scope Tier B 12-language Immunity with our team.
CipherMap CLI + Sample Test Repo (macOS · Apple Silicon)
Includes the native ciphermap CLI binary (v1.0.0), ./eval.sh quickstart runner, and sample-vault/ test repo (10.4 MB).
- Platform
- macOS · Apple Silicon
- Architecture
- arm64
- Download
- 10.4 MB · ZIP archive
- Source fixtures
- Go, Python, JS, Java
macOS: Developer ID Application: Ciphermap Technologies LLC (Team ZLF7244KA7) · Windows Releases: Authenticode Signed · SHA-256 + Ed25519 .text Seal
Verify SHA-256 Checksum (ciphermap-customer-eval-pack.zip): e21823ce85c8c8...8d23c0d274
echo 'e21823ce85c8c8025e303637d710efb716b6047d985aa281ac97708d23c0d274 ciphermap-customer-eval-pack.zip' \ | shasum -a 256 -c
View All 6 Platform Direct Downloads (macOS · Linux · Windows)
Three Steps to Verify Local Discovery on macOS
After downloading the archive, these local commands match macOS · Apple Silicon and explicitly disable CLI network access. No root permissions are required.
Unpack the Evaluation Bundle
Extract the archive into any local or air-gapped directory and mark the binary executable.
unzip ciphermap-customer-eval-pack.zip cd customer-eval-pack xattr -d com.apple.quarantine ciphermap 2>/dev/null || true chmod +x ciphermap ./ciphermap version --format json
Scan and Preview sample-vault
Runs in-process self-tests, writes the fixture report, and previews candidates without changing source. Expect 4 files, 12 records (11 actionable), and no scan errors.
./ciphermap test --strict --offline --no-telemetry ./ciphermap scan ./sample-vault --offline --no-telemetry --format json -o sample-vault-scan.json ./ciphermap fix ./sample-vault --dry-run --offline --no-telemetry
Point CipherMap at Your Repository
Run an air-gapped scan against your own repository with --offline and --no-telemetry.
./ciphermap scan "/path/to/your-repo" --offline --no-telemetry --format json -o results.json
Plan Your Evaluation Checklist in 30 Seconds
Choose your operating system, primary language, and goal to get a tailored command checklist, expected output, and plan fit before sharing any contact details.
macOS · Apple Silicon · Go · Find cryptography in my repositories
Fixture: sample-vault/main.go
Full go/ast parser + go.mod dependency inspection (fails closed on syntax errors).
Eligible Go candidates require explicit verifier consent and clean project tests before apply. Other findings receive migration guidance.
./ciphermap scan "/path/to/your-repo" --offline --no-telemetry --format json -o scan.json ./ciphermap fix "/path/to/your-repo" --dry-run --offline --no-telemetry
Emits schema_version 1 JSON (provenance v2) listing every matched rule, line number, and coverage_status ("complete" or "incomplete"). Upload scan.json to /visualizer to inspect your graph locally.
What Is Inside the Evaluation Pack Archive (.zip)
.zip)Native executable with embedded detection rules. Inspect its exact version, rule catalog, and supported flags locally.
The bundled eval.sh does not set offline controls and may send anonymous telemetry. Use the explicit offline commands above; script steps differ by platform.
Includes main.go (RSA-1024/MD5), crypto_tool.py (DES/ECB), server.js (3DES/SHA-1), and VaultManager.java (MD5).
Reference notes for the packaged fixture. The command’s --help output and the offline quickstart above define the current evaluation path.
In-Process Checks Available with ciphermap test --strict
ciphermap test --strictcrypto/rand)--json)Request a 7-day Pro Trial key
Downloaded the CLI bundle? Request a signed 7-day Tier A key for one auditor seat to evaluate CycloneDX 1.6 CBOM exports, mandate profiles, and supported CLI remediation on a representative repository.
- CycloneDX 1.6 CBOM & OpenVEX 0.2.0: Export machine-readable cryptographic inventories and auditor bundles locally.
- Gate 2 Verified Remediation: Preview candidate migrations first, then evaluate licensed apply on supported patterns.
- CNSA 2.0, FIPS 140-3 & CMMC 2.0: Generate scoped readiness evidence offline for engineering and audit review.
The self-serve 7-day trial unlocks Tier A Standalone PQC Auditor (one auditor seat, one repository). Tier B Enterprise capabilities—ciphermap immunity scan, 4-Gate extinguish, CycloneDX 1.6 CISA IBOM attest, and ciphermap mcp—are scoped via a 25-minute engineering demo or 30-day fleet pilot (eligible for the 25% Founding Reference Partner annual discount).