Security & Antivirus False Positives

Why did my antivirus flag Bug Pocket?

Because Bug Pocket is a brand-new, actively developed desktop tool, you may occasionally see a heuristic warning (such as a "SmartScreen unrecognized app" or a general antivirus "Threat Prevented" alert) when installing a new release candidate.

These are false positives. They occur due to a combination of how the application is built and its current distribution status:

• Unsigned Binaries: To keep Bug Pocket completely free for the testing community, we do not currently use an expensive Extended Validation (EV) enterprise code-signing certificate. Windows and third-party antivirus engines inherently treat unsigned executables with caution.
• Global Hotkeys & Screen Capture APIs: The core functionality of Bug Pocket relies on hooking into global keyboard inputs and OS-level screen capture APIs so you can log bugs without breaking your workflow. Because it is unsigned, heuristic security engines often misclassify this expected behavior as a malicious script or keylogger.
• Local-First Architecture: The app packages an Electron wrapper that reads and writes directly to a local SQLite database on your machine to ensure zero network lag. Unrecognized binaries executing local read/write commands frequently trigger behavioral sandboxes.

Verification & Trust

Bug Pocket does not contain malware, adware, or telemetry trackers. You can verify the integrity of the installer by checking it against global threat intelligence aggregators.

Our latest builds consistently return a 0/64 Clean status on VirusTotal, a 0/13 Clean status on Jotti, and a Clean dynamic analysis from Kaspersky Threat Intelligence.