Get HijackShield for Windows
Two pieces, five minutes: the browser extension and the local agent. Full protection from the moment both are running.
45-day free trial — full protection included, no signup, no payment details, no account required.
Install the browser extension
The extension watches every page you visit and every file you download. Works with Chrome, Edge, Brave, and Opera.
Install the HijackShield Agent
A small local service that runs the detection engine — ML scoring, phishing heuristics, and document screening — entirely on your device.
Download for Windows (.msi)Version 4.9.0 · Released July 12, 2026 · Signed by AiTM Security, LLC
Windows 10 (22H2+) and Windows 11, 64-bit
macOS version coming soon
That's it. Run the installer (Windows will ask for administrator permission — that's the protection service being registered), and the extension detects the agent automatically within seconds. The welcome page confirms when you're fully protected.
45 days of everything, then your call
The trial starts the first time the agent runs and includes every detection and protection feature — nothing held back. No account, no credit card, nothing to cancel. (Note: the optional Microsoft 365 auto-remediation layer is a business add-on — see pricing.)
When the 45 days end, you get a 7-day grace period with full protection and a daily reminder. After that, advanced detection pauses until a license is added — but dangerous-download protection in the extension keeps running, so you're never left with nothing.
Ready to continue? See pricing for individual, family, and business plans.
Check the signature and hash
The installer is signed with an EV code signing certificate issued to AiTM Security, LLC. Right-click the file, choose Properties, then Digital Signatures to confirm the publisher. To verify the file hash, run this in PowerShell:
Get-FileHash .\HijackShield-Agent-Setup-4.9.0.msi -Algorithm SHA256The result should match:
91B26125872141FC53491ACC30C0C34BBAD57F0F90913247D1AFDB0AA53C8AC4Everything runs on your device
The agent listens only on your own machine (127.0.0.1) and the extension talks to it locally. Page content, URLs, and credentials never leave your device. There is no cloud scoring, no telemetry, and no account.
The one exception is opt-in: organizations can configure SIEM forwarding, which sends detection events (never page content) to the organization's own infrastructure. If nobody configures it, nothing is ever sent. Full details in our privacy policy.
Clean removal, any time
Remove the agent from Windows Settings → Apps → HijackShield Agent → Uninstall, and remove the extension from your browser's extensions page. Your settings are kept in case you reinstall; delete the HijackShield folder under ProgramData to remove those too.
Questions before you install?
We respond to every inquiry within one business day — including help with installation and enterprise deployment.