# Install kekkai with Homebrew

File integrity monitoring tool. Version 0.2.11 via Homebrew; verified 2026-07-28.

## Install

```sh
sudo av install brew:kekkai
```

Additional install commands:

### macOS

- Homebrew (100%):

```sh
brew install kekkai
```

  Evidence: local Homebrew formula metadata

## Package facts

- **Package key:** brew:kekkai
- **Package manager:** Homebrew
- **Version:** 0.2.11
- **Source summary:** File integrity monitoring tool
- **Homepage:** <https://github.com/catatsuy/kekkai>
- **Repository:** <https://github.com/catatsuy/kekkai>
- **Last updated:** 2026-07-28T09:52:29Z
- **Generated:** 2026-08-03T19:37:03+00:00

## Executables

- kekkai (alias)

## Install behavior

- Bottle: not available

## Freshness

- Page generated: 2026-08-03
- Package-manager version: 0.2.11
## Project history and usage

Kekkai is a Go file-integrity monitoring CLI that records content hashes during deployment and verifies them later to detect unauthorized file changes.

### Project history

The project was created on GitHub on 2025-08-12 by catatsuy. Its README presents it as a production-server tool designed around content-only hashing, immutable exclude rules, symlink-aware checks, and optional manifest storage in Amazon S3.

### Adoption history

Kekkai is a young, specialized security utility. By 2026-07-01, Homebrew formula metadata listed v0.2.9, and GitHub API metadata reported 132 stars and one fork.

### How it is used

The typical workflow is to generate a manifest for a deployed application directory, store it locally or in S3, and run periodic verification from cron or monitoring systems. The README emphasizes excluding only generated files such as logs, caches, uploads, and NFS mounts.

### Why package nerds care

Kekkai is notable as a small single-binary alternative to heavier file-integrity stacks. It packages a deliberately narrow deployment-time manifest model that fits immutable-server and cloud-IAM workflows.

### Timeline

- 2025-08-12: GitHub repository created.
- 2026-01-03: v0.2.0 release published.
- 2026-06-28: v0.2.9 release published.
- 2026-07-01: Homebrew formula metadata listed kekkai v0.2.9.

### Related projects

- Amazon S3 is used as the recommended secure manifest store.
- Traditional tools such as tar and rsync are named by the README as less suitable comparisons for this content-hash use case.

### Sources

- <https://api.github.com/repos/catatsuy/kekkai>
- <https://api.github.com/repos/catatsuy/kekkai/releases?per_page=10>
- <https://formulae.brew.sh/api/formula/kekkai.json>
- <https://github.com/catatsuy/kekkai>
- <https://raw.githubusercontent.com/catatsuy/kekkai/main/README.md>


## Security Notes

No matching local secret-handling manifest was found for kekkai. Nucleus package metadata is still published here so future coverage has a stable package URL.



## Combined YAML source

View the package source record on GitHub. [combined/kekkai.yml](https://github.com/mxcl/pkgdb/blob/main/combined/kekkai.yml)


## Sources

- pkg.so package database
- Geiger risk classifier
- curated package history
- pkgdb category and tag curation
- cross-ecosystem install command graph