Common user locations. Fast enough to use as a regular check.
Everything included in the Kraken AV desktop app.
Core protection is included in every edition. Plus adds automation, while Ultra adds deeper local inspection and integrity tools.
Three normal scans, plus one Ultra option.
Quick Scan is for routine checks. Full Scan walks the standard user areas more broadly. Custom Scan points at exactly the file, folder or mounted drive you choose. Ultra's Abyss Scan walks fixed local drives when you want the broadest local pass.
A broader pass over the normal user data areas.
A file, folder or drive you pick yourself.
Fixed local drives, with live progress in the dashboard.
You can see what happened.
Known signature matches are moved to Quarantine and recorded in Protection History with the detection name and original path. Exclusions are managed from their own screen, so you can remove a trust decision later instead of editing a configuration file.
Check one file without starting a system scan.
Inspector reports the path, size, SHA-256 hash, whether the current definitions contain a known match, whether the path is excluded and whether its file type is covered by real-time monitoring for the active edition.
Game Mode keeps background work quieter.
With Game Mode enabled, Kraken waits longer before non-urgent real-time checks while Kraken continues watching new and changed files covered by your edition.
Turn it on for games, audio work or other latency-sensitive sessions. Turn it off again when you want normal response timing.
The higher plans mostly save time.
Daily scheduled scan Plus / Ultra
Choose an hour and Kraken starts a Quick Scan once per day while the PC is running.
Automatic removable-drive scan Plus / Ultra
New removable media can be scanned when it first appears instead of waiting for you to select it manually.
Startup Audit Plus / Ultra
Reads common per-user and machine-wide Windows Run entries and writes a local report you can inspect in the Tools screen.
Install integrity Ultra
Re-hashes Kraken's protected installed components and warns if they no longer match the hashes created for that release.
Definition updates
Every edition uses the same automatic refresh schedule and can also request an update immediately from Settings.
Notification controls
Threat alerts, scan-complete alerts and definition-reconnect alerts can be switched independently.