Homeβ€Ί Software & Downloadsβ€Ί brew.sh
Mostly Safe

Yes β€” brew.sh looks mostly safe

70/ 100 trust score
Industry: Software & Downloads Checked Jun 11, 2026 Software & Downloads average: 59 40 signals

In plain English

Homebrew is a widely trusted tool for software developers, and you can safely use it. It functions as a public utility rather than a business, so its lack of corporate contact info is normal for this type of service.

Cross-referenced 40 live signals from Google Safe Browsing, VirusTotal, WHOIS and more on Jun 11, 2026. How we score β†’

Where the score comes from

We look at six areas. Here's how brew.sh did in each.
90
Security

The site uses industry-standard TLS 1.3 and HSTS, ensuring encrypted and secure connections. It operates on robust infrastructure, consistent with high-traffic open-source projects.

85
Identity

This is a long-standing, high-traffic domain that has been active for over a decade. The registration details align with its role as a widely used software project.

90
Reputation

With a high Tranco rank, it is clearly a popular and trusted hub for developers. The domain shows no history of being linked to malicious activity or blacklists.

55
Transparency

The site lacks a formal team or contact page, which is common for open-source projects but leaves users seeking direct accountability with few options. It functions more as an automated tool than a commercial entity.

60
Compliance

It lacks formal legal pages, which is expected and acceptable for a non-commercial, open-source software project. Users are not providing payment or personal data here.

95
Infrastructure

The domain is managed with high-quality technical standards, including proper DNSSEC and DMARC enforcement. These configurations protect against domain spoofing and email-based attacks.

What we checked

The 40 signals behind this report.
Security & Transport
Certificate Issuer
Let's Encrypt
Google Web Risk
Clean
HSTS Header
Present
SSL Certificate
Valid
Security Headers
1 of 6
Server
GitHub.com
TLS Version
TLS 1.3
Identity & WHOIS
About Page
Not found
Branding
Complete
Business Disclosure
Not found
Contact Info
Not found
Domain Age
13 years, 4 months
Domain Expiry
2027-03-22T15:50:45Z
Legal Pages
Missing
Registrar
1API GmbH
Infrastructure & DNS
CDN
Fastly
DMARC Record
p=quarantine
DNS Blacklists
Clean
DNS Resolution
8 IP(s)
DNSSEC
Enabled
DNSSEC
signedDelegation
Email (MX Records)
5 record(s)
Name Servers
4 server(s)
Page Load Time
65ms
SPF Record
Present
Reputation & Reach
Open Graph Type
website
Page Description
The Package Manager for Everywhere.
Page Heading
Homebrew
Page Language
en
Page Title
Homebrew: The Package Manager for Everywhere
Schema Description
The Package Manager for Everywhere.
Schema Name
Homebrew
Sitemap
89 pages
Social Media Presence
2 platforms
Structured Data
Found
Tranco Rank
Rank #8285
Trustpilot
No Trustpilot profile
Web Archive History
No archive found
Website Status
Online
robots.txt
Present

Run this site? Show your score.

Add a trust badge so visitors can see your live score for themselves.

Get your badge β†’
verified.fyi
brew.sh
70
N Partner pick
This site checks out. Stay covered everywhere: NordVPN's Threat Protection blocks known scam sites before they load.
Try NordVPN β†’

If you are a macOS or Linux developer, you have likely encountered Homebrew. Many people ask, 'is brew.sh fake' or 'is brew.sh a scam' when they realize the installation process involves pasting a terminal command from the website. In the case of Homebrew, this is the standard, official method for installing the package manager.

You should feel confident in the site because it has operated for over thirteen years and maintains a massive, global user base. Unlike commercial retail sites that require privacy policies and physical office addresses to establish trust, Homebrew is an open-source project. Its infrastructure is managed by a community, which explains the unconventional approach to contact information and legal disclosures. This lack of formal business presence is a typical feature of massive software projects, not a warning sign of a malicious site.

When evaluating brew.sh reviews, keep in mind that this is a public utility. You are not buying a product, so there is no financial transaction to fear. The site serves a single, specific purpose: providing the code to automate software installs. Because it is backed by high-tier infrastructure and widely used by developers across the world, you should treat it as an essential, safe resource. Always ensure you are navigating to the correct domain to avoid any potential typosquatting attempts, as you should with any software download source.

More Software & Downloads sites

How similar sites score. See all β†’