Installation

System requirements

Legion runs on macOS 12 or later (Apple Silicon and Intel) and Linux (Debian 13, Ubuntu 22+, or Kali Linux).

You don't need anything pre-installed. The app ships its own runtime, and tools like nmap, ffuf, and metasploit can be installed from inside the app with one click.

Download

Go to the pricing page and grab the free download. The trial is 3 days, full access, no card required. There's also a link directly to the GitHub releases page if you prefer to grab the file directly.

Available formats:

• macOS — .dmg (Apple Silicon and Intel)
• Linux — .deb, .AppImage, .rpm

Install on macOS

Open the .dmg and drag ThreatStrike Legion into your Applications folder. Launch it from there like any other app.

On first launch, macOS may show a security prompt. If it does, go to System Settings, open Privacy & Security, and click Open Anyway.

Install on Linux

Ubuntu / Debian (.deb):

sudo apt install ./threatstrike-legion.deb

RPM-based distros (.rpm):

sudo rpm -i threatstrike-legion.rpm

Any distro (.AppImage):

chmod +x ThreatStrike-Legion.AppImage
./ThreatStrike-Legion.AppImage

First time setup

When you open Legion for the first time, enter your license key or press the 3-day trial button. Then pick whether you want to start in red team or blue team mode. You can switch between them at any time using the toggle in the top right of the app.

All tools are available to download from the Downloads section inside the app. Install the ones you need from there.

If you want to use the AI Operator, go to Settings and add your API key. Legion supports Claude (Anthropic API), OpenAI, Google Gemini, and any local OpenAI-compatible endpoint like Ollama or LM Studio. The AI features are optional. Every tool works without them.

Updates

Legion checks for updates automatically and installs them from the in-app updater. You don't need to re-download the installer to stay current.

Trial and licensing

The 3-day trial gives you full access to every feature. Your engagement data is not deleted when the trial expires, you just can't create new engagements until you activate a license.

To buy, go to the pricing page. License keys are emailed instantly and work on both macOS and Linux. Each key activates on up to 3 devices (Personal and Consultant) or 10 (Team).