Home Features Pricing Documentation Services Contact DOWNLOAD
← Back to docs

Installation

How to install SiteCMD on macOS, Windows, and Linux at launch.

Downloads aren’t open yet. SiteCMD is in pre-launch. Get on the launch list at /download. This page describes the install once builds are available.

SiteCMD builds for macOS (Apple Silicon and Intel), Windows (x86_64), and Linux (x86_64). You’ll pick the right one for your machine from the download page.

macOS

You’ll get a .dmg for your CPU architecture (Apple Silicon or Intel). To install:

  1. Open the .dmg.
  2. Drag SiteCMD to your Applications folder.
  3. Eject the disk image.
  4. Open Applications and double-click SiteCMD.

First launch

SiteCMD is signed with an Apple Developer ID and notarized by Apple, so macOS Gatekeeper opens it normally. You won’t see the “cannot be opened because the developer cannot be verified” warning. The first time you open any app downloaded from the internet, macOS may show a one-time “SiteCMD is an app downloaded from the Internet. Are you sure you want to open it?” confirmation; click Open.

The auto-updater is also cryptographically signed, so updates after the first launch don’t trigger extra prompts.

Windows

You’ll get an .msi installer for x86_64. Run it and follow the steps.

First launch

The installer is code-signed with Azure Trusted Signing, so you won’t see an “unknown publisher” warning. SmartScreen builds trust per signing identity over time; until that reputation is established, it may still show a “Windows protected your PC” prompt. If it does, click More info, then Run anyway. It stops once the signature has enough installs behind it.

Linux

You’ll get an .AppImage or .deb for x86_64. AppImages run directly:

chmod +x SiteCMD_<version>_amd64.AppImage
./SiteCMD_<version>_amd64.AppImage

For the .deb:

sudo dpkg -i SiteCMD_<version>_amd64.deb

Auto-updates

The desktop app checks for updates in the background against releases.sitecmd.com and prompts you when a new version is ready. You install on your schedule, the app does not force-restart. Update checks make a small network request to fetch the latest release manifest. Nothing about your scans, source code, or projects is sent in that request.

What gets installed

SiteCMD is a single application plus a per-user data directory:

  • App bundle: /Applications/SiteCMD.app (macOS), Program Files\SiteCMD (Windows), wherever your distro puts AppImages or .deb installs.
  • Data directory: the standard Tauri app-data path for your OS. This is where the local SQLite database, scan history, logs, and the audit log live. Nothing about your project goes to a server.
  • OS keychain entries: integration credentials (Cloudflare, GA4, GitHub, Plausible, and so on) are stored in your operating system’s credential store. They’re never written to the SiteCMD database.

Uninstalling

Remove the application bundle the same way you remove any other app on your OS.

To wipe local data as well, delete the SiteCMD app-data directory. Integration credentials live in your OS keychain or credential store and aren’t removed by uninstalling the app. If you want a clean slate, search for “SiteCMD” entries in Keychain Access (macOS), Credential Manager (Windows), or secret-tool / GNOME Keyring (Linux) and delete them.