Open Tools AssetCheck Lite
Stable · Open source · Single .exe

AssetCheck Lite v1.0.1

A local-first, offline workstation assessment tool for Windows admins, MSPs and technically-minded users. Drop the executable on a Windows machine and get a calm, one-screen picture of hardware health (SMART / NVMe), approximate second-hand value, explainable keep / upgrade / replace recommendations, Windows 11 / TPM / Secure Boot / disk-encryption readiness, and full hardware details. C# / .NET 8 / WPF single-file portable .exe — no installer, no agent, no telemetry, no network, no cloud account. Your data stays yours.

Specs & verification

Status Stable
Version 1.0.1
Released 2026-05-25
Platform Windows 10 / 11 · x64
Built with C# · .NET 8 · WPF
Size 69 MB (bundled .NET runtime)
Languages 7 (EN · RO · DE · ES · FR · IT · PT)
  • GitHub github.com/3389ro/assetcheck-lite · Releases · Issues
  • SHA-256 60ce2696aa15f715c49906475432c9621b7e9b048bf5b883a3db3a6b7cf11a48 .sha256
  • Source SHA-256 23f30bae6ea76b88e217442de160215f97bb61866b4542cc1d4ace549ab5351b .sha256
  • Licence MIT · LICENSE.txt + NOTICE.txt bundled inside the source ZIP and the repo

The binary is ~69 MB because it bundles the entire .NET 8 runtime and the WPF native libraries plus the JSON knowledge base (disk models, reliability defaults, second-hand value model, Microsoft's Windows 11 supported-processor list) — nothing else to install on the target machine. Verify the SHA-256 above with Get-FileHash AssetCheckLite.exe -Algorithm SHA256. If your antivirus blocks single-file self-extraction (rare; usually AppLocker or aggressive heuristics), build the portable folder variant from source using publish-portable.bat — same code, different packaging.

At a glance

Name
AssetCheck Lite
Purpose
Assess one Windows workstation in a single click — hardware health from SMART / NVMe, approximate per-component second-hand value, keep / upgrade / replace recommendation, Windows 11 + TPM + Secure Boot + disk-encryption readiness, full hardware inventory. Local-only, no network, no agent.
Target user
Windows admins, MSPs, support technicians doing site visits or new-customer onboarding; auditors documenting fleet state; helpdesk staff attaching machine specs to tickets.
Inputs
The current machine. The assessment runs automatically on startup; the Rescan button re-runs it on demand.
Outputs
Interactive in-app view (Overview / Storage Health / Market Value / Upgrade Advice / Security Readiness / Hardware Details) plus one-click export to HTML, JSON or CSV. Copy summary drops a plain-text executive summary on the clipboard for ticket pasting. Ctrl+T captures one PNG per nav page into a timestamped folder.
Platform
Windows 10 / Windows 11, x64. Single-file self-contained executable; the .NET 8 runtime is bundled inside — no separate install.
Licence
MIT. LICENSE.txt and NOTICE.txt bundled in source ZIP and repo.
Telemetry
None. The application makes no network calls at all — not for the scan, not for updates, not for analytics, not for the value model. The local-only badge in the bottom-left of the window is a constant reminder.
Admin rights
Recommended but not required. Some TPM / BitLocker / WMI providers return more detail when launched from an elevated session; without elevation those fields degrade gracefully to “Not determined” and the Overview surfaces a Scan notes block listing what was skipped. The rest of the scan completes normally.
Local state
User preferences (language, theme, last export folder) live under %APPDATA%\AssetCheckLite\settings.json. Scan results are held in memory until you export them — nothing is auto-saved. Logs (no PII) go to %LOCALAPPDATA%\AssetCheckLite\logs\.
Network behavior
None. No outbound HTTPS, no DNS lookups, no update checks. The knowledge base (disk models, reliability defaults, value model, Win11 CPU support) is embedded in the exe and optionally overridden by JSON files in the adjacent data\ folder — both are read-only.
What it does not do
Does not write to WMI, does not modify any system setting, does not enable or disable any feature, does not install any service or scheduled task. Never reads, shows or exports BitLocker recovery keys — security is status-only.
Download
AssetCheckLite.exe — 68.9 MB portable executable.
Source code
github.com/3389ro/assetcheck-lite · source ZIP.
Verification
SHA-256 of binary: 60ce2696aa15f715c49906475432c9621b7e9b048bf5b883a3db3a6b7cf11a48. Verify with Get-FileHash AssetCheckLite.exe -Algorithm SHA256.

Screenshots

Live capture from the v1.0.1 binary on a real Windows 11 workstation (Intel Core i9-12900KF, 64 GB RAM, Gigabyte Z690 AORUS PRO, dual NVMe). One screenshot per sidebar tab. The Windows product-key field on the Hardware Details tab is intentionally blurred — the application only ever exposes the last 5 characters that Windows itself surfaces through its read-only APIs (it never reads, stores or exports full keys), and we blur even those 5 chars here so the page can be shared safely.

AssetCheck Lite v1.0.1 Overview tab — top-right Copy summary + Export HTML / JSON / CSV / Rescan controls; left sidebar lists Overview, Storage Health, Market Value, Upgrade Advice, Security Readiness, Hardware Details, About with a 7-language switcher (EN / DE / FR / ES / IT / PT / RO); Executive Summary card grid: Overall Health Generally healthy, Storage Status Monitor (2 disks · 1 with elevated indicators), Estimated Value 1,086–2,202 EUR (typical 1,577 EUR · Medium confidence), Upgrade Advice, Security Readiness, Last Scan; Scan notes mention that TPM status needed an elevated session; bottom-left a Local-only / no telemetry badge.
Overview tab — calm executive summary across hardware health, storage status, approximate machine value, upgrade outlook, security readiness and last-scan timestamp. The Scan notes block explicitly lists what an unelevated session could not read (TPM here).
AssetCheck Lite v1.0.1 Storage Health tab — Stability signals card (last 30 days, flagged Risk) lists 1236 disk/controller events, 21 NTFS events, 0 WHEA, 41 Power, 0 Display. Event-log findings table itemises Storage stack errors (1236) and NTFS errors (21) with first-observed and last-observed timestamps. Footer note explains these are observed symptoms in the Windows System event log — not confirmed hardware faults; they raise the priority of backup / replacement decisions for the affected disk.
Storage Health tab — rolling 30-day stability signals built from the Windows System event log (disk / NTFS / WHEA / Power / Display categories), each itemised as observed symptoms with timestamps. Symptoms, not verdicts — AssetCheck Lite never claims a disk is failing on its own.
AssetCheck Lite v1.0.1 Market Value tab — Approximate offline estimate banner, Local-only · no live pricing badge top-right with Import value model JSON button. Estimated machine value card: Low 1086 EUR, Typical 1577 EUR, High 2202 EUR, Medium confidence. Pricing model: Embedded · v2026.22.
Market Value tab — approximate second-hand value built from a local heuristic model (hardware_value_model.json, embedded and overridable from a JSON next to the exe). Low / typical / high band plus a confidence level; never live marketplace data.
AssetCheck Lite v1.0.1 Upgrade Advice tab — Decision card reads Selective upgrade advised, Upgrade Viability Score 64 / 100. Score bands legend: 80–100 Keep · 60–79 Upgrade recommended · 40–59 Conditional upgrade · 0–39 Replace recommended. Why this upgrade decision explainer cites stability signals (Event Log -18), storage reliability (-8), encryption readiness (-8), with recommended actions: monitor or replace the Samsung SSD 980 PRO 2TB, review security posture (Defender / Firewall / SMBv1 / RDP). Recommended actions table below starts with Medium-priority Monitor or replace Samsung SSD 980 PRO 2TB at 170–280 EUR estimated cost with Reliability impact.
Upgrade Advice tab — explainable keep / upgrade / replace verdict with the underlying score and the points each weakness subtracted, followed by a Recommended actions table sorted by priority with cost band and impact category.
AssetCheck Lite v1.0.1 Security Readiness tab — Windows 11 readiness card status Likely ready · verify, with per-row checks: 64-bit operating system Pass, Memory ≥ 4 GB Pass (64 GB detected), System storage ≥ 64 GB Pass (2 TB), UEFI firmware Pass, Secure Boot capable Review (supported but currently disabled), TPM 2.0 Not determined (may require elevation), Processor Pass (12th Gen Intel Core meets the Windows 11 floor). Firmware & TPM card: TPM Version Unknown / Secure Boot Available not enabled / UEFI firmware Enabled. Encryption readiness card: BitLocker Not detected, Device Encryption Not available. Security posture card: Defender off · ESET Security active, Firewall Domain OFF · Private OFF · Public OFF, RDP enabled · NLA required, SMBv1 disabled, Workgroup WORKGROUP. Windows maintenance card: No reboot pending, Last update ~0 days ago.
Security Readiness tab — Windows 11 readiness check itemised line by line, Firmware & TPM block (UEFI / Secure Boot / TPM), Encryption readiness (BitLocker, Device Encryption), Security posture (Defender, third-party AV, firewall, RDP, SMBv1) and Windows maintenance. Status only — no BitLocker recovery key is ever read.
AssetCheck Lite v1.0.1 Hardware Details tab — Operating system: Microsoft Windows 11 Pro, 10.0.26200, 64-bit. CPU: 12th Gen Intel Core i9-12900KF, 16C / 24T, 3.2 GHz, Socket U3E1. Motherboard & BIOS: Gigabyte Technology Z690 AORUS PRO, American Megatrends F24a 2023-04-25, SMBIOS 3.5, BIOS age 3.1 years. Basic software: Windows activation Activated · OEM (Windows Professional edition), key (last 5) field blurred for the screenshot — the application only ever exposes the last 5 characters and never the full key. Microsoft Office: Microsoft 365 Apps subscription. Storage topology: System disk #1 GPT, EFI False, Recovery False, C: 261.3 GB free of 1.78 TB NTFS (14.7%), D: SSD1TB 402.7 GB free of 2 TB NTFS (20.1%), G: Google Drive 12 GB free of 16.1 GB FAT32 (74.4%).
Hardware Details tab — full local inventory (CPU, motherboard + BIOS, RAM, OS edition + activation channel, storage topology, basic software). The Windows product-key last-5 field is blurred for this public screenshot — AssetCheck Lite never reads or exports the full key; only the last 5 chars Windows itself exposes are surfaced inside the app.
AssetCheck Lite v1.0.1 About tab — full-width hero card reads "AssetCheck Lite — A local-first, offline workstation assessment tool for IT admins, MSPs and technically-minded users. Reviews the machine itself — disk health, approximate market value, upgrade outlook, security readiness and hardware inventory — no service, no agent, no telemetry." Diagnostic flags selector with English (default), Open Folder button. Senior-level custom-software pitch panel from 3389 Software Outsourcing with three call-to-action buttons.
About tab — product positioning, diagnostic-flag selector for translators / advanced users, and a senior-engineering pitch panel. The app's local-only / no-telemetry stance is reinforced here too.

What it does

The full feature set in one page — everything below ships inside the single ~69 MB executable.

Hardware health (Storage)

  • SMART + NVMe parsing with category-level breakdown — reliability counters, error logs, temperature, lifetime indicators.
  • Transparent scoring — every reliability score on screen has a why: the underlying SMART attributes that drove it are listed alongside the score, with the weight each one contributed.
  • Per-model defaults from a local disk-models.json knowledge base shipped alongside the exe (SSDs, HDDs, NVMe drives — hundreds of catalogued models). When a model isn't in the catalogue, a heuristic fallback (reliability-defaults.json) keeps the score honest.
  • Honest projection cap. Linear wear-based projections beyond 5 years are displayed as “5+ years” (localised in 7 languages) — the math may extrapolate further, but SSD retirement is dominated by causes the projection doesn't model (NAND retention, controller faults, vendor warranty as a floor).

Market value (offline, local heuristic)

  • Local second-hand value model covering CPUs, GPUs, RAM and storage classes — hardware_value_model.json, human-readable, ships next to the exe so the model can be inspected and overridden per site.
  • Per-component estimates so admins see what contributes to the device's residual value, not just a black-box number.
  • Approximate, offline, transparent. Values are explicitly approximate and never presented as live market prices.
  • Virtual machines auto-detect to Not applicable — the residual-value model doesn't apply to a guest OS.

Upgrade advice

  • Keep / upgrade / replace recommendation per machine, with estimated cost, impact and urgency.
  • Explainable — each verdict lists the inputs it considered (current value, replacement cost, performance class, readiness gaps).
  • Skipped automatically on a virtual machine.

Security readiness

  • Windows 11 readiness check against Microsoft's published supported-processor list (win11-cpu-support.json, embedded), plus TPM 2.0, Secure Boot, UEFI / Legacy BIOS, RAM.
  • TPM status (via Win32_Tpm) — present, enabled, owned.
  • Disk encryption status (via Win32_EncryptableVolume) — encrypted / not encrypted. Never reads, shows or exports BitLocker recovery keys.
  • Defender posture, firewall state, SMBv1 status, RDP posture — surfaced in the Operational Signals row.

Hardware inventory

  • Full local inventory — CPU, RAM modules (slot / size / speed / type), mainboard, BIOS, GPU adapters, NICs, monitor models, installed software with versions and install dates.
  • Battery health on laptops — design vs. full-charge capacity, cycle count where available.
  • Event-log indicators — disk / NTFS / WHEA / Power / Display error counts from the relevant Windows event logs (surfaced as the Stability Signals card).

Reporting

  • HTML, JSON, CSV export — all stay local until you choose to send them.
  • Copy summary — drops a plain-text executive summary on the clipboard for ticket pasting (User summary or Admin summary; both built from the same underlying data).
  • Ctrl+T screenshot capture — dumps one PNG per nav page (Overview, Storage Health, Market Value, Upgrade Advice, Security Readiness, Hardware Details) into a timestamped folder and opens it in Explorer. Handy for client deliverables and bug reports.

UI & localisation

  • Single-window layout — Overview / Storage Health / Market Value / Upgrade Advice / Security Readiness / Hardware Details / About from a left sidebar.
  • 7 UI languages: English, Română, Deutsch, Español, Français, Italiano, Português. Top-left language switcher.
  • Light + dark themes, driven by WPF design tokens.
  • Reports and CLI output stay in English (technical surface).

Trust model

  • Local-only. No telemetry, no network calls, no cloud account, no update check.
  • No background agent. Runs when you open it, stops when you close it. No service, no scheduled task, no installer footprint.
  • Read-only WMI / CIM access. Never writes to WMI, never modifies system settings, never enables or disables any feature.
  • BitLocker recovery keys are never read, shown or exported — security is status-only.
  • Your data stays yours. Reports are produced only when you explicitly export them.

Release history

AssetCheck Lite v1.0.1 is the first public release on GitHub. Earlier private iterations are not republished here.

v1.0.1 2026-05-25

First public release.

Local-first, offline workstation assessment tool for Windows admins, MSPs and technically-minded users. WPF single-file self-contained executable that bundles the entire .NET 8 runtime + the JSON knowledge base (disk models, reliability defaults, second-hand value model, Microsoft's Win11 supported-processor list). Five-area assessment: Storage Health (SMART/NVMe with transparent scoring), Market Value (per-component offline heuristic), Upgrade Advice (keep/upgrade/replace with cost+impact+urgency), Security Readiness (Win11/TPM/Secure Boot/UEFI/disk-encryption status), Hardware Details (full local inventory + battery health + event-log indicators). HTML/JSON/CSV export, Copy summary to clipboard, Ctrl+T screenshot capture. 7 UI languages, light/dark themes. Local-only: no telemetry, no network, no cloud account, no background agent, read-only WMI/CIM access. BitLocker recovery keys are never read, shown or exported. MIT licensed; github.com/3389ro/assetcheck-lite.

Known limitations

FAQ

Does it work without admin rights?

Yes — but with a smaller surface. Without elevation, some TPM / BitLocker / WMI providers return less detail, and the Overview surfaces a Scan notes block listing what was skipped. The rest of the scan (hardware inventory, disk SMART / NVMe data, OS / firmware state, installed software in HKCU and the user’s machine state) completes normally.

Does it read or export BitLocker recovery keys?

No. AssetCheck Lite reports only whether a volume is encrypted or not (via Win32_EncryptableVolume status). Recovery keys are intentionally out of scope — the tool never reads them, never shows them, and never exports them. This is a deliberate trust-model decision, not a missing feature.

Does it modify the machine in any way?

No. Read-only WMI / CIM access throughout. The tool does not write to WMI, does not modify any system setting, does not enable or disable any feature, does not install any service or scheduled task, does not create files outside %APPDATA%\AssetCheckLite\ (settings) and %LOCALAPPDATA%\AssetCheckLite\logs\ (logs, no PII), and never makes outbound network calls. Run it on a sealed forensic image if you need to.

How is the second-hand value computed?

From a local heuristic model in hardware_value_model.json — human-readable, embedded in the exe, and optionally overridden by an adjacent data\hardware_value_model.json. Values are explicitly approximate offline estimates and never presented as live market prices. The model covers CPUs, GPUs, RAM and storage classes; each component's contribution to the total is shown in the Market Value tab so admins see what drives the number.

Why is the binary 69 MB?

It bundles the entire .NET 8 runtime, the WPF native libraries, the JSON knowledge base (disk models, reliability defaults, value model, Win11 CPU support list) and the localisation satellites for 7 languages, inside a single self-contained .exe. The trade-off is binary size for “runs on any Windows 10/11 x64 machine, no runtime install, no version conflicts.” If size matters more, build the portable folder variant from source using publish-portable.bat — same code, different packaging.

How is this different from PDQ Inventory / Lansweeper / Snipe-IT?

PDQ Inventory, Lansweeper and Snipe-IT are server-deployed inventory platforms with central databases — the right answer for a fleet of 100+ machines and a long-term inventory record. AssetCheck Lite is the opposite end: zero install, single .exe, designed for ad-hoc site visits, onboarding audits, and one-off documentation. Both can coexist — use AssetCheck Lite for the calm one-screen report you hand to a customer or paste into a ticket, your inventory platform for the long-term state.

Need a tailored variant — white-labelled, RMM integration, custom report layouts?

AssetCheck Lite is a free, open-source tool. If your team needs it adapted to a private fleet, integrated into an existing RMM or ticketing system, white-labelled for customer deliverables, or extended with custom hardware coverage and report layouts, tell us about it.