If you ship a Windows app you've probably seen "Windows protected your PC" on your own installer. Signing alone doesn't prevent it: SmartScreen goes by reputation for the exact file and certificate, and that resets on every release and every certificate renewal. There's no way to ask Microsoft in advance. So I built SignalScreen: https://signalscreen.dev Free signing check: upload an .exe and get a grade (signed? timestamped? SHA-1? real CA? certificate expiry). Checked in memory, never stored. The grader is open source (Rust). Live probe: your installer is downloaded onto a fresh Windows 11 VM with Mark-of-the-Web, the way a user gets it, and launched. You get warned/clear, the dialog text, a screenshot, and the file/certificate details, by email and as a shareable page. Stack: Rust (axum + SQLite), a Rust worker driving Windows 11 VMs in containers, a clean-image reset per probe, guest firewalled off from the host and LAN. The probe is free while in beta. Feedback welcome, especially if you've fought SmartScreen before.   submitted by   /u/mnaza_andrey [link]   [comments]