My Open Source Security Scanner Got Flagged as a Trojan by Windows Defender

Windows Defender silently quarantined and deleted MCPSense, an open-source Go security scanner, when installed from GitHub Releases on Windows.

VirusTotal showed only 1 detection out of 71 engines, pointing to a false positive rather than real malware.

The issue matches a known heuristic/ML pattern that often hits downloaded Go binaries, especially those with the Mark of the Web.

The post explains steps to reduce the problem so legitimate security tools are less likely to be blocked and lose users.