64-bit
exeuser scopegithub.com · publisher domain- File name
- Insomnia.Core-13.1.0.exe
- SHA-256
- f01975414027d41224d8043fd158f6c1933ba57c5b71c9337eb011e04486dd07
- Silent install
- --silent
by Kong · Apache-2.0
The Desktop API client for REST and GraphQL. Make requests, inspect responses.
These URLs are the ones Kong declares in its own manifest. We do not proxy or shorten them, and we do not host a copy.
Run this against the file on disk. If the output does not match the hash below, the file is not what Kong published. Delete it.
Windows · PowerShell
Get-FileHash "Insomnia.Core-13.1.0.exe" -Algorithm SHA256macOS · Linux
shasum -a 256 "Insomnia.Core-13.1.0.exe"Expected output
f01975414027d41224d8043fd158f6c1933ba57c5b71c9337eb011e04486dd07
Got a different hash, or one you cannot place? Paste it into the hash checker and it will tell you which program and version it belongs to, past releases included.
The unattended switch below is the one Kong declares in the installer manifest, not one we guessed by trying flags.
64-bit · user scope · publisher-declared
.\Insomnia.Core-13.1.0.exe --silentRun it from the folder holding the downloaded file, in a terminal opened as administrator when the package installs for all users. Silent means no window and no prompts, so check the exit code rather than waiting for something to appear: 0 is success and 3010 means it worked but wants a reboot.
The macOS build as Homebrew declares it, with the same treatment as the Windows side: the publisher's own URL and a hash to check it against.
| Signal | Finding | Points |
|---|---|---|
| SHA-256 hash published | 1 of 1 installers ship a SHA-256 hashWithout a published hash there is no way to prove the file you downloaded is the file the publisher built. | 30 / 30 |
| Binary provenance | 1 on the publisher's own domainThe strongest signal against a repackaged installer: the file should come from the publisher, not from a mirror nobody vouches for. | 35 / 35 |
| Served over HTTPS | 1 of 1 over HTTPSAn installer fetched over plain HTTP can be modified in transit. | 15 / 15 |
| Release recency | last release about 1 months agoSoftware that has not shipped in years accumulates unpatched vulnerabilities. | 15 / 15 |
| Licence declared | Apache-2.0A declared licence tells you what you are actually allowed to do with the software. | 5 / 5 |
Yes, in the sense we can actually verify: the installer downloads from github.com, which is a domain we have tied to Kong.
The installer on this page comes with the SHA-256 Kong declared, so you do not have to take our word for it: hash the file you downloaded and compare.
What this does not tell you is whether the software itself is any good, or whether you want what it does once installed. A publisher can ship something you would rather not run and the download is still authentic. We answer the question we can measure and leave the other one to you.
If Windows says “Windows protected your PC” when you run it, that is SmartScreen reporting reputation, not a malware verdict — it shows up on perfectly legitimate software from small publishers and on releases that are simply new. The reverse matters more: no warning does not mean the file was checked.
How the 100/100 score is calculated · why the source matters more than the reputation
Windows ships with a package manager, and this program is in it. The identifier below is the one Microsoft's repository uses, which is also where the download URL and hash on this page come from.
Install
winget install --id Insomnia.Insomnia --exactUpgrade later
winget upgrade --id Insomnia.InsomniaWhy --exact: without it winget matches on name as well as identifier, and a search that returns more than one package makes it stop and ask rather than install. Pinning the identifier is what makes the command safe to put in a script.
Not installing anything, or getting an error back? The commands that actually come up covers upgrading everything at once, what --include-unknown is for, and why winget can be missing from a machine that should have it.
The version history of Insomnia, each release with the download URL the publisher declared at the time and the SHA-256 to check it against. Useful when an update breaks something and you need to downgrade to a build that worked.
We do not host any of these files and never re-upload them, which is the difference between this and an old-version download site.
7464414C631AD21FACEBFFC9A8390A88C1F13E5F7FA585A7181620EF90FA1FC3
78C8FBD4CBE6D7D1D4F43BFE23BFA477CE01291C83D9316D6B55C62200368A48
2B1EF8612FEFCF4002585DA919E6B56943FFD1336109F53A778F822AFD752BE4
BEC143ADC50FCC78A838641AF6593F585874856629FB5F1B8A6B62BE058BE714
75308E99D7549C450E438B7552C288FE1C580815FCEE9BF546CE5EA275984A5C
4106D375C7566ACDE69E132997301D7831EB77890079B3B640FE7D67CE2F18B4
E8B951C924A8F3C5EEB9CAAC8D578D4140DB70CE994A49C565BCDB70930AFF32
0C872D77370D5F40D5C369896528D8C321B309B08A7EFBE0319923C431204008
020F110BE80A22B414FFD47D4583C321FC947EFA01C646B56C6EC7CD5ABCCB2D
B8AC76B367B5235389E133FB8A06A76BED5C8067C9D1AEE8DC567039574A379A
E9A14F92E742DA35E40917A15A1C56E4B3F450194E1FF6F81AB332AC95F5B5BE
F37257D6CB555E087A370EC1C2A5025BF918697FD3E433E72042E1F67F806ECF
73A261F538251A7450160951A67DCA42603A9AA748C0400EBD167E60DC884848
B5D20D2542A4882D7A5A372890E3D5BDA902D8FCF3C8D2CCB3C6292051F9D51E
9637FE744D2F0537F0A01D0E6F42856ABBC4128C1170EA511C46E0092ED95D8D
30FE9CFD009E2F03F6CF0CFE9E412CD6B282190B1F399905EB5CEC70F42C91BB
411DF7425B66DAD6E5A4190B268D9F52634007B326724DE8A0440DCFC19C6714
789D541AC65E13B908B06F2597D6ECCA654F1735941CF9B42DCBCB4E70FC6592
4CAD6DA072068027AA0470AEEAC6BED9F25CD4ECF50AE8622D289C49DA31C34F
FEFE7AB85E86D0E16FBBF2D3FC7FDAEC914799D7192F63FF43DA9B17842BAE2B
The file names, so you can tell what you have. Their hashes are in the hash checker and in the downloadable archive.
Publishers take old builds offline without warning, so a link here can stop working even though the hash stays correct forever. If you already have the file, the hash is what matters: it tells you whether what you have is what they published.
Every Insomnia version with a published manifest, newest first. The most recent ones are listed above with their file names and hashes.
Not related to Insomnia — just other entries, each with its own official URL and published hash.