Download Orthalon
Download the Orthalon desktop controller and browser extension for an evaluation rollout.
Desktop controller
The desktop controller enrolls the endpoint through your browser, stores its service credentials in the operating system credential store, keeps policy synchronized, and supervises desktop and MCP protection components. Choose the package that matches the endpoint.
| Operating system | Package | Integrity |
|---|---|---|
| macOS on Apple silicon | Download DMG | SHA-256 |
| macOS on Intel | Download DMG | SHA-256 |
| Windows 10 or 11, x64 | Download MSI | SHA-256 |
| Debian or Ubuntu, x64 | Download DEB | SHA-256 |
| Other supported x64 Linux distributions | Download AppImage | SHA-256 |
These evaluation packages are built from one source revision on native GitHub-hosted runners. The release workflow publishes the installers and adjacent checksums to Orthalon's Cloudflare R2 download bucket before the documentation deployment is triggered.
Signing status: The current direct-download packages are release candidates for controlled evaluation. Apple notarization and Microsoft publisher signing are still pending. Use them only on endpoints you administer. Do not suppress operating-system security controls across a production fleet. A SHA-256 checksum detects transfer corruption; it does not replace publisher signing.
Install and enroll
Verify the download
Download the checksum next to the installer and compare it before opening the package.
macOS or Linux:
shasum -a 256 -c Orthalon-Desktop-*.sha256Windows PowerShell:
$expected = (Get-Content .\Orthalon-Desktop-Windows-x64.msi.sha256).Split(' ')[0]
$actual = (Get-FileHash .\Orthalon-Desktop-Windows-x64.msi -Algorithm SHA256).Hash.ToLower()
if ($actual -ne $expected) { throw "Orthalon installer checksum mismatch" }Install the controller
On macOS, open the DMG and move Orthalon to Applications. On Windows, run the MSI. On Debian or Ubuntu, install the DEB with your approved software-management process. For an AppImage, mark the file executable and launch it from the user session.
Connect the endpoint
Open Orthalon and choose Connect with browser. Sign in at orthalon.com (the browser may display the canonical www.orthalon.com hostname), choose the organization, review the requested services, and approve the endpoint. Protect and Business plans provision Desktop and gateway credentials. Enterprise can also provision the separate MCP credential.
Confirm protection
Return to the desktop controller and confirm that enrollment, policy version, and the Desktop agent status are healthy. Follow the Desktop Protection guide before enabling an enforced rollout.
Browser extension
Download the current Orthalon browser extension package, extract it, and follow the Browser Extension installation guide. Until the Chrome Web Store listing is approved, administrators can distribute this package to a controlled evaluation group or load it unpacked on an individually managed browser.
Release handling
- Each desktop release is built for Apple-silicon macOS, Intel macOS, Windows, and Linux before any file is published.
- A failed platform build, checksum validation, R2 upload, or public download check stops the release.
- The Vercel documentation deploy hook runs only after all public R2 objects respond successfully.
- The stable links on this page resolve through Orthalon and redirect to the current objects on
downloads.orthalon.com. - Keep the previous installer available to your endpoint-management team until upgrade and rollback checks are complete.